Aljaydu
May 4th, 2005, 09:13 PM
I am using a Syage Firewall Pro and I just got an "alarm" that said
"Unsolicited incoming ARP reply detected, this is a kind of MAC spoofing that may consequently do harm to your computer." and something else about Mac Spoofing, what is that and how can I stop it?
When I bring up "Who-Is"
:SBC Internet Services - Southwest SBCIS-SBIS-6BLK (NET-70-240-0-0-1)
70.240.0.0 - 70.255.255.255
PPPoX Pool - rback23.hstntx 030905-2102.708921 SBC07024601600023050318213306 (NET-70-246-16-0-1)
70.246.16.0 - 70.246.17.255
SBC's MAC-Spoofing me????
This is what I've found on MAC Spoofing:
MAC spoofing basically means that another device on the internet could have the same MAC address as your network card or IP device. All network devices have a unique MAC address which is a hex value. The MAC address is then bound to the network protocol, be it IP, IPX etc. MAC addresses are used as the final stage of network address translastion.
If somone has spoofed your MAC address it basically means that they could be receiving your network traffic instead of yourself. MAC addresses are cached on your local machine against any other network devices you have accessed.
To see a list of IP/MAC addresses stored on your local machine go to a command prompt and type the following: arp -a
this will then show you a list of IP address against their physical MAC address. MAC addresses in theory can only exist once and cannot be changed at the hardware level as it is set by the device manufacturer. Hackers today have of course overcome these obstacles by using MAC spoofing etc.
http://www.d-a-l.com/help/archive/index.php/t-554.html
Is this anything that I should be concerned about since it's my IP spoofing me or is Sygate doing it's job?
Should I add this:SMAC (MAC Address Modifying Utility (spoofer) for Windows 2000, XP, and Server 2003 systems, regardless of whether the manufactures allow this option or not) to my security?
Link: http://www.klcconsulting.net/smac/
Thanks for any advice and replies in advanced.
"Unsolicited incoming ARP reply detected, this is a kind of MAC spoofing that may consequently do harm to your computer." and something else about Mac Spoofing, what is that and how can I stop it?
When I bring up "Who-Is"
:SBC Internet Services - Southwest SBCIS-SBIS-6BLK (NET-70-240-0-0-1)
70.240.0.0 - 70.255.255.255
PPPoX Pool - rback23.hstntx 030905-2102.708921 SBC07024601600023050318213306 (NET-70-246-16-0-1)
70.246.16.0 - 70.246.17.255
SBC's MAC-Spoofing me????
This is what I've found on MAC Spoofing:
MAC spoofing basically means that another device on the internet could have the same MAC address as your network card or IP device. All network devices have a unique MAC address which is a hex value. The MAC address is then bound to the network protocol, be it IP, IPX etc. MAC addresses are used as the final stage of network address translastion.
If somone has spoofed your MAC address it basically means that they could be receiving your network traffic instead of yourself. MAC addresses are cached on your local machine against any other network devices you have accessed.
To see a list of IP/MAC addresses stored on your local machine go to a command prompt and type the following: arp -a
this will then show you a list of IP address against their physical MAC address. MAC addresses in theory can only exist once and cannot be changed at the hardware level as it is set by the device manufacturer. Hackers today have of course overcome these obstacles by using MAC spoofing etc.
http://www.d-a-l.com/help/archive/index.php/t-554.html
Is this anything that I should be concerned about since it's my IP spoofing me or is Sygate doing it's job?
Should I add this:SMAC (MAC Address Modifying Utility (spoofer) for Windows 2000, XP, and Server 2003 systems, regardless of whether the manufactures allow this option or not) to my security?
Link: http://www.klcconsulting.net/smac/
Thanks for any advice and replies in advanced.