Re: ssh security question
On Sun, Aug 26, 2001 at 11:29:57PM +0200, Martin F Krafft wrote:
| also sprach dman (on Sun, 26 Aug 2001 05:06:37PM -0400):
| > The MAC address is only known along that particular wire. That is, if
| > the IP packets pass through any routers or gateways the receiving side
| > will see the MAC address of the last gateway/router interface and not
| > the MAC of the sender.
|
| right, i know this. but they are on the same subnet and even if, a
| change in MAC address during an active ssh connection can't be a good
| sign to sshd...
Suppose there were 2 routers on the same ethernet link (physical
layer) as your NIC. Now suppose, for whatever reason, some (incoming)
packets are routed via one router and some are routed via the other.
This would be a perfectly valid reason for the MAC address changing
but the connection still being legit.
-D
Reply to: