Date: Mon, 19 Nov 2007 11:43:13 -0500 From: Mike Tancsa <mike@sentex.net> To: freebsd-security@freebsd.org Subject: testing wireless security Message-ID: <200711191643.lAJGh3jb027972@lava.sentex.ca>
next in thread | raw e-mail | index | archive | help
I have been playing around with 3 ath based FreeBSD boxes and seem to
have got everything going via WPA and a common PSK for 802.11x
auth. However, I want to have a bit more certainty about things
working properly.
What tools do people recommend for sniffing and checking a wireless network ?
In terms of IDS, is there any way to see if people are trying to
bruteforce the network ? I see hostap has nice logging, but anything
beyond that ?
e.g. with a bad psk on the client
hostapd: ath0: STA 00:0b:6b:2b:bb:69 IEEE 802.1X: unauthorizing port
is there a way to black list MAC addresses, or just allow certain
ones from even trying ? IPSEC will be running on top, but I still
want a decent level of security on the transport layer.
On the client I have
% cat /etc/wpa_supplicant.conf
network={
ssid="testnet1"
#
psk="xxx"
}
% ifconfig ath0
ath0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 2.2.2.9 netmask 0xffffff00 broadcast 2.2.2.255
ether 00:0b:6b:2b:bb:69
media: IEEE 802.11 Wireless Ethernet autoselect (OFDM/48Mbps)
status: associated
ssid mike1 channel 1 bssid 00:0b:6b:84:3e:76
authmode WPA privacy ON deftxkey UNDEF TKIP 2:128-bit TKIP 3:128-bit
txpowmax 49 bmiss 7 protmode CTS burst roaming MANUAL bintval 100
and the host
% ifconfig ath0
ath0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2290
inet 2.2.2.1 netmask 0xffffff00 broadcast 2.2.2.255
ether 00:0b:6b:84:3e:76
media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>
status: associated
ssid mike1 channel 1 bssid 00:0b:6b:84:3e:76
authmode WPA privacy MIXED deftxkey 2 TKIP 2:128-bit TKIP 3:128-bit
txpowmax 39 bmiss 7 protmode CTS burst dtimperiod 1 bintval 100
% cat /etc/hostapd.conf
interface=ath0
driver=bsd
logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=0
debug=3
dump_file=/tmp/hostapd.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=wheel
ssid=testnet1
macaddr_acl=0
auth_algs=1
#### IEEE 802.1X related config ####
ieee8021x=0
#### WPA/IEEE 802.11i config #####
wpa=1
wpa_passphrase=xxx
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP TKIP
---Mike
--------------------------------------------------------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet since 1994 www.sentex.net
Cambridge, Ontario Canada www.sentex.net/mike
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200711191643.lAJGh3jb027972>