to controll access to services in my network,which one is better,to block/allow using ip addresses or mac addresses ...as both can be spoofed easily !
Printable View
to controll access to services in my network,which one is better,to block/allow using ip addresses or mac addresses ...as both can be spoofed easily !
Use IP address (not host name) instead of MAC address. It is very trivial to spoof a MAC address. It is significantly more difficult to spoof an IP address to make a tcp connection.
P.S. Here's a good short article for you:
IP Spoofing: An Introduction
First google hit for "ip spoofing" actually. :P
Remember, security in layers. Harden your services as well.
Filter using both. ;)