enhanced security patch for if_wi
The MiP RvL
the_mip_rvl at myrealbox.com
Wed Dec 24 16:07:29 PST 2003
Hello
This is a patch for which a couple of wi-fi fans have been waiting to get :) And now it's there, just before Christmas ;)
This patch is against FreeBSD 5.1, I didn't have current installed and 5.0 doesn't work in hostap mode with 1.7.4 firmware.
http://wleiden.webweaving.org:8080/svn/node-config/other/enh-sec-patch/
For the enhsec option to work you need a prism 2,2.5,3 with firmware 1.6.3 or higher.
To give a small explaination:
It uses a firmware feature: 0xFC43
# wicontrol -i iface -E 0|1|2|3
This sets the WI_RID_CNFENHSECURITY flag.
0 = "disabled"
1 = hide SSID in beacon frames
2 = ignore clients with a "ANY" SSID
3 = 1 and 2 combined
It blocks clients with a "" or "ANY" ssid
And disables ssid broadcasting.
I checked it today, and it worked,
but please do acknowledge the fact that I haven't been
able to test this function on a real network, with real data going over the link.
I haven't had the time yet to make it work with ifconfig, so until then, use wicontrol.
Regards,
Roland van Laar
More information about the freebsd-mobile
mailing list