Access control list in hostapd

Jouni Malinen j at w1.fi
Wed Jul 30 08:22:29 EDT 2008


On Wed, Jul 30, 2008 at 10:47:11AM +0200, Sonia wrote:

> I'm using hostapd-0.5.8 with madwifi driver, and I'm
> trying to use accept and deny files in order to apply
> access control policies. But, it seems that no matter
> what I put in this files and macaddr_acl variable, all
> the clients can associate with the AP. Has anybody had
> the same problem?

macaddr_acl is only available with drivers that use hostapd for
management frame processing (e.g., Host AP driver or mac80211). It does
not work with madwifi.

> Besides, I would like to use this files to filter Wifi
> clients based on manufacturer, only taking into
> account the first part of the MAC address. Is it
> possible??

Not in the current implementation. In general, I don't see much point in
using MAC ACL since it is trivial to change the client MAC address and
this type of list does not provide any real security.

-- 
Jouni Malinen                                            PGP id EFC895FA


More information about the HostAP mailing list