From: -f (fobiit.org)
Date: Sun Nov 07 2004 - 14:39:38 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hi there,

i am using upc as my ISP and they have the mac address or your
blood style service. which means that i always connect to the
gateway using the mac address i had when registered the service.

i would like to ask the developers to reconsider again the
possibility of including this functionality in the OS...

because i have downloaded sea.c and put it in rc.local.
...of course i soon learned that the securelevel is increased
before that....

so i put it in rc.securelevel:
/usr/local/sbin/sea -vd ne3 00:e0:06:f1:93:4f

at restart it confirmed the change, but ifconfig
and dhclient all print the old address... so i am stuck...

also if i have 'dhcp' in /etc/hostname.ne3 , /etc/netstart is before
rc.securelevel, so there is no good place in the rc framework
to put something like this, or is there?

i know this is a kind of 'exotic' functionality, and maybe
quite frowned upon(and until you actually need it,
don't even realise what great pain in the ass is.....),
but i think it would help a lot to have this in e.g.
/etc/hostname.ne3, as a keyword (like mac=..., or even as
utility !ethaddr xxx, etc).

i still don't have a router up because of this and have
to search for utilities with no support from the openbsd team,
have to run an untrusted piece of third party code in securelevel=0.
i don't think this is good security, which is from year 1998 and
doesn't even work right now, "out of the box".

and lastly, of course there is also the chicken and egg problem,
how can i get sea.c if i can't connect to the net?

-f
ps. this is an 3.5 release machine.
--
...and that is how we know the Earth is banana-shaped.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]