Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 20.05.2007 07:50:10 von yellowgirlnc

Is there an existing automated way to change the MAC address & hostname of
my home ROUTER (Linksys WRT54G)?

I know about Gorlani's MacMakeUp manual MAC address-spoofing tool but it
works on the WinXP computer - but this doesn't help anyone behind a NAT
router - as the ROUTER's MAC address is what the Internet "sees"
(http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp).

Manually, I can change the MAC address of the Linksys WRT54G wireless NAT
by going to the Linksys WRT54G MAC Address tool inside the router at
http://192.168.10.10/WanMAC.htm - which works fine - and can do the same
with the router HOSTNAME (which the Internet also sees) - but these changes
are all manual.

Since the Linksys WRT54G router runs Linux, I started googling for a more
automated way to periodically change both the router's MAC address (which
is the only MAC address the Internet sees) and the router's host name. I
soon came across you guys in the process (e.g., Mad Macs changes both the
host name and MAC address of the PC NIC card
(http://www.irongeek.com/i.php?page=security/changemac&mode= print). But Mad
Macs won't do a thing to change the MAC address or HOSTNAME shown to the
Internet because the ROUTER's hostname and MAC address are what the
Internet "sees".

In digging through your archives for a script to run on the ROUTER, I see
you guys wrote automated scripts to spoof the MAC address & hostname of
Windows & Linux PCs
(http://www.irongeek.com/i.php?page=security/changemac&mode= print) ... but
being behind a NAT ......

Has anyone yet written a program to automatically change the MAC address &
HOSTNAME of the wireless router?

I also asked this question at binrev but haven't seen any response yet
http://www.binrev.com/forums/index.php?showtopic=30773&st=0# entry258594

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 20.05.2007 09:10:19 von Jens Hoffmann

Hi,

yellowgirlnc wrote:
> Manually, I can change the MAC address of the Linksys WRT54G wireless NAT
> by going to the Linksys WRT54G MAC Address tool inside the router at
> http://192.168.10.10/WanMAC.htm - which works fine - and can do the same
> with the router HOSTNAME (which the Internet also sees) - but these changes
> are all manual.

The Internet does not see your MAC-address nor your hostname.
The MAC-address is transproted to the next hop (if at all) and that is
your ISP.

What is the purpose of changing MAC-address and hostname then?

Cheers,
Jens

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 20.05.2007 20:16:56 von matt

"Jens Hoffmann" wrote in message
news:5baairF2rfg6sU1@mid.uni-berlin.de...
> Hi,
>
> yellowgirlnc wrote:
>> Manually, I can change the MAC address of the Linksys WRT54G wireless NAT
>> by going to the Linksys WRT54G MAC Address tool inside the router at
>> http://192.168.10.10/WanMAC.htm - which works fine - and can do the same
>> with the router HOSTNAME (which the Internet also sees) - but these
>> changes
>> are all manual.
>
> The Internet does not see your MAC-address nor your hostname.
> The MAC-address is transproted to the next hop (if at all) and that is
> your ISP.
>
> What is the purpose of changing MAC-address and hostname then?
>
> Cheers,
> Jens
>

Trying to do some botched attempt at wireless spoofing ?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 20.05.2007 21:32:43 von yellowgirlnc

On 20 May 2007 07:10:19 GMT, Jens Hoffmann wrote:

> The Internet does not see your MAC-address nor your hostname.

Hi there Jens,
What information does a web page get then? Doesn't it get the machine name,
the browser type and version, the operating system, the IP address, etc.?

> The MAC-address is transproted to the next hop (if at all) and that is
> your ISP.
> What is the purpose of changing MAC-address and hostname then?

Good question Jens. If you know of a better way, then let me know. As an
automated privacy step, I'm simply trying to automate the changing of my IP
address and hostname provided to web pages.

I've noticed when I change my router MAC address manually, then I get a new
IP address.

So here is the desired sequence .....
1.- I go to a web page and it "captures" my IP address & hostname whether I
like it or not
2.- On a fifteen-minute schedule, my IP address and hostname is changed
3.- When I go back to that web address, it captures my new IP address and
hostname but it has no idea that I am the same person (only my ISP knows
for sure).

Isn't the hosntame and IP address of the router what is captured by the web
pages I visit? If I change the router's MAC address, that changes the IP
address every time (works like a charm, within seconds).

Without (slower than molasses) proxies, is there a better way to change the
IP address and hostname captured by web pages I visit?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 20.05.2007 21:34:05 von yellowgirlnc

On Sun, 20 May 2007 19:16:56 +0100, Matt wrote:
> Trying to do some botched attempt at wireless spoofing ?

Naaaaaaaah. It's my observation I get a new IP address from my ISP each
time I change the MAC address of my router and I want to automate that so
that a web page which "captures" my IP address and hostname doesn't get the
same one twice.

How would YOU accomplish that?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 20.05.2007 21:43:06 von Jens Hoffmann

Hi,

yellowgirlnc schrieb:
> What information does a web page get then? Doesn't it get the machine name,
> the browser type and version, the operating system, the IP address, etc.?

Yepp.
Use a proxy or a proxy chain.

> Isn't the hosntame

No.

> and IP address

Yes.

> Without (slower than molasses) proxies, is there a better way to change the
> IP address and hostname captured by web pages I visit?

Yes. Do not use the Web at all.

Cheers,
Jens

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 20.05.2007 21:56:17 von Bit Twister

On Sun, 20 May 2007 19:32:43 GMT, yellowgirlnc wrote:

> 2.- On a fifteen-minute schedule, my IP address and hostname is changed

Just a FYI:
You may want to revisit your ISP's Acceptable Use Policy or whatever
they call it.
You would seem to be abusing their DHCP server and they could
terminate your account. :(

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 20.05.2007 23:09:37 von Sebastian Gottschalk

yellowgirlnc wrote:

> On Sun, 20 May 2007 19:16:56 +0100, Matt wrote:
>> Trying to do some botched attempt at wireless spoofing ?
>
> Naaaaaaaah. It's my observation I get a new IP address from my ISP each
> time I change the MAC address of my router


When changing your MAC address, you're effectively resetting your
connection. Upon reconnect, you're getting a new IP address assigned.

Don't you think that pulling the plug or pressing the reset button is a way
easier method for achieving this? Or, uh, what about the "Disconnect" button
in your router's config menu? D'oh!

> and I want to automate that so
> that a web page which "captures" my IP address and hostname doesn't get the
> same one twice.


What a nonsense. Anyway, why don't you try something like a PROXY?

> How would YOU accomplish that?


Thinking first and then asking the RIGHT question. You're extremely far off
from your actual problem, and only wrong conclusions in between.

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 21.05.2007 00:32:50 von yellowgirlnc

On 20 May 2007 19:56:17 GMT, Bit Twister wrote:

> You would seem to be abusing their DHCP server and they could
> terminate your account.

Huh? By changing the router's MAC address? Will the police be here soon?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 21.05.2007 00:33:23 von yellowgirlnc

On Sun, 20 May 2007 21:43:06 +0200, Jens Hoffmann wrote:

> Use a proxy or a proxy chain.

What's a good FAST freeware proxy chain you'd recommend Jens?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 21.05.2007 00:36:33 von yellowgirlnc

On Sun, 20 May 2007 23:09:37 +0200, Sebastian G. wrote:

> When changing your MAC address, you're effectively resetting your
> connection. Upon reconnect, you're getting a new IP address assigned.
Yup. Everytime.

> Don't you think that pulling the plug or pressing the reset button is a way
> easier method for achieving this?
I used to do that but switching the MAC address allows me to change my IP
address from the kitchen instead of having to go downstairs to the router.

> Wwhat about the "Disconnect" button in your router's config menu? D'oh!
Pressing Disconnect & then Reconnect also works but it's not as fast as
just changing the MAC address. Either way, it's no better of a solution.

I already knew about all three of these, having done them all.
But ... the question is .......
Do you have a suggestion for AUTOMATING any of your suggestions?

If you do, I'd be forever greatful!

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 21.05.2007 01:05:13 von Bit Twister

On Sun, 20 May 2007 22:32:50 GMT, yellowgirlnc wrote:
> On 20 May 2007 19:56:17 GMT, Bit Twister wrote:
>
>> You would seem to be abusing their DHCP server and they could
>> terminate your account.
>
> Huh? By changing the router's MAC address?

Yes.

> Will the police be here soon?

Of course not. Your ISP cuts you off.
They know you will call and they can tell you why.

Even with you getting 4 different ip address per hour you are most
likely to stay under their radar. But then again, maybe a few hundered
lurkers on SBC's net see your post and do it also.

DHCP server admin gets called because a monitoring program flags ip address
lease chrun crossed a threshold.

A little research points you out and the easy fix is deactivating
accounts abusing the network. 8-)

But, what is the worst that can happen. Lose your adsl ISP and go back
to dial up. Problem solved.

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 21.05.2007 01:51:16 von Sebastian Gottschalk

yellowgirlnc wrote:

> On 20 May 2007 19:56:17 GMT, Bit Twister wrote:
>
>> You would seem to be abusing their DHCP server and they could
>> terminate your account.
>
> Huh? By changing the router's MAC address? Will the police be here soon?


No, you'll just be disconnected and your account canceled.

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 21.05.2007 01:53:38 von Sebastian Gottschalk

yellowgirlnc wrote:


>> What about the "Disconnect" button in your router's config menu? D'oh!
> Pressing Disconnect & then Reconnect also works but it's not as fast as
> just changing the MAC address.


What a nonsense, it is no way slower. And, in contrast to your fucking with
the DHCP server, a legitimate way.

> Do you have a suggestion for AUTOMATING any of your suggestions?


Use wget on your router's config menu.

But instead of doing that, you should stop thinking about it and addressing
the actual problem.

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 21.05.2007 07:09:41 von Jens Hoffmann

Hi,

yellowgirlnc schrieb:
>> Use a proxy or a proxy chain.
>
> What's a good FAST freeware proxy chain you'd recommend Jens?

Cheap, fast, reliable: Pick any two.

You can't have all of it in one package unfortunately.

Start with: http://anon.inf.tu-dresden.de/index_en.html

Cheers,
Jens

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 22.05.2007 07:22:53 von guntherwiebel

Perfect free proxy does not exist. Changing your IP address is good
ideas not best discussed here before today.

It is a good idea to continue change PC MAC address many times every
day for new IP address and therefore for new identity. Web page you
visit only know you for the time of the IP address not expired. Change
PC IP address two times in hour bad guys only trace you're half hour
of activity unless they ask the ISP which they do not do often.

On the PC hostname you may not need change PC hostname two times every
hour. Look if PC hostname is captured at the privacy detection home
page

http://gemal.dk/browserspy/
https://www.astalavista.net/?cmd=net
http://www.netreal.de/test/ip/
http://www.leader.ru/secure/who.html
http://www.rrdb.org/check_yourself.php?l=en
http://www.whatismyipaddress.com/
http://www.whatismyip.com/

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 22.05.2007 07:46:51 von Jens Hoffmann

Hi,

guntherwiebel@googlemail.com schrieb:
> Changing your IP address is good
> ideas not best discussed here before today.

Why is that so?

>
> It is a good idea to continue change PC MAC address many times every
> day for new IP address and therefore for new identity.

It is not. It is an uncalculated additional burden on the ISP side.
The ISP is the only one able to identify the user anyway (if the user is
not stupid enough and you live in a decent democracy).

> On the PC hostname you may not need change PC hostname two times every
> hour. Look if PC hostname is captured at the privacy detection home
> page

Still: What is the purpose?

Cheers,
Jens

PS: Security turns into paranoia, if there is no calculated risk.

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 22.05.2007 08:00:28 von david wright

On Mon, 21 May 2007 07:09:41 +0200, Jens Hoffmann wrote:

> Start with: http://anon.inf.tu-dresden.de/index_en.html

Are you *SURE* this free JAP proxy program actually works?

I installed & configured this recommended JAP program but
https://www.astalavista.net/?cmd=net still found my IP address.

Does any free proxy actually work against astalavista's hacking methods?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 22.05.2007 08:11:33 von Jens Hoffmann

Hi,

David Wright schrieb:
>> Start with: http://anon.inf.tu-dresden.de/index_en.html
>
> Are you *SURE* this free JAP proxy program actually works?

Yes.

> I installed & configured this recommended JAP program but
> https://www.astalavista.net/?cmd=net still found my IP address.


Did you activate JAP? What did the security gauge show?


> Does any free proxy actually work against astalavista's hacking methods?

Defined behaviour is hardly hacking.

Greetings,
Jens

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless

am 22.05.2007 11:51:27 von Anonymous

David Wright wrote:

> On Mon, 21 May 2007 07:09:41 +0200, Jens Hoffmann wrote:
>
> > Start with: http://anon.inf.tu-dresden.de/index_en.html
>
> Are you *SURE* this free JAP proxy program actually works?
>
> I installed & configured this recommended JAP program but
> https://www.astalavista.net/?cmd=net still found my IP address.

Works fine from here, with that site.

>
> Does any free proxy actually work against astalavista's hacking methods?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 22.05.2007 16:35:20 von david wright

On Tue, 22 May 2007 08:11:33 +0200, Jens Hoffmann wrote:

> Did you activate JAP? What did the security gauge show?

I certainly activated JAP by following their pretty good wizard. But you
may be correct in that my "security guage" just says "OK". It does not
point to "fair" or "high".

I'll click around to see why I don't have "high" security enabled in JAP.
You're probably right that that is the problem.

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wireless router

am 22.05.2007 16:58:01 von david wright

On Tue, 22 May 2007 14:35:20 GMT, David Wright wrote:

> I'll click around to see why I don't have "high" security enabled in JAP.
> You're probably right that that is the problem.

I changed a few settings and now astalavista does NOT see my IP address.
Whooooopiiiieeeee!

I still only have a midway point between "OK" and "Fair" security on the
JAP Anonymouse Proxy speedometer.

What do we need to do to get "High" security in JAP?

Re: Automate MAC & HOSTNAME changes in Linksys WRT54G NAT wirelessrouter

am 22.05.2007 17:30:23 von Sebastian Gottschalk

David Wright wrote:

> On Tue, 22 May 2007 14:35:20 GMT, David Wright wrote:
>
>> I'll click around to see why I don't have "high" security enabled in JAP.
>> You're probably right that that is the problem.
>
> I changed a few settings and now astalavista does NOT see my IP address.
> Whooooopiiiieeeee!
>
> I still only have a midway point between "OK" and "Fair" security on the
> JAP Anonymouse Proxy speedometer.
>
> What do we need to do to get "High" security in JAP?


As the documentation states: More users.