Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

moto21

macrumors newbie
Original poster
Oct 25, 2006
6
0
Sheffield/ Frankfurt
Hey I need your help. I got banned from Campus because I treid to solve a email problem on my Macbook (couldnt sent mails on port 25 or 587) and did a Portscan. Bad idea beacuse its seen as an attack on the Uni network and so I was banned with this MAC Address. The guy behind the counter told me that its just the Computer but NOT the USER who is banned, so he told me to get a new MAC Address. I have tried "sudo ifconfig ether" and "lladdr" but both didnt work (either with airport down or up).

I wasnt to sure about tinkering with the driver as explained here:http://www.suspekt.org because my driver hex are a bit different...

Mac Os X 10.4.8
Macbook 2 Ghz


Thank you!

:)
 

4np

macrumors 6502a
Feb 23, 2005
972
2
The Netherlands
Try this:

1. obtain your current MAC address using the following command: ifconfig en0 | grep ether
2. this will return for example: ether 00:0a:27:8d:7b:24
3. change your MAC address to use 25 instead of 24 at the end by using the following command: sudo ifconfig en0 lladdr 00:0a:27:8d:7b:25
4. confirm the MAC address has changed by using the same command (as in step 1) again: ifconfig en0 | grep ether
5. this should now return: ether 00:0a:27:8d:7b:25

Let me know if it works :) (I'm at work using a pc, not a mac so I can't try it out here)

Note though that this change is not permanent and you would need to do this every time you want to change your MAC address. You could create a shell script or something for it though. for example (using the example above) in terminal:

echo '#!/bin/sh' > change_mac
echo 'sudo ifconfig en0 lladdr 00:0a:27:8d:7b:25' >> change_mac
chmod gou+rx change_mac

now you can run the change_mac script everytime you need to change your mac.

./change_mac

...or put it on your desktop or something :)
 

yellow

Moderator emeritus
Oct 21, 2003
16,018
6
Portland, OR
You cannot permanently change the MAC address of your NIC in your Mac.
You can change it temporarily, but it will be gone after a reboot.

I suggest either getting a router to place between you and the University network, or switching to wired/wireless.

Airport interface is en1.
 

moto21

macrumors newbie
Original poster
Oct 25, 2006
6
0
Sheffield/ Frankfurt
4np said:
Try this:
Well thats pretty much as I tried it "I have tried "sudo ifconfig ether" and "lladdr" but both didnt work (either with airport down or up)."

en1 is airport on a mac so the full line would be: $ sudo ifconfig en1 ether(or)lladdr (MAC address).

This does NOT work.

Bummer, now you have edited :)

No way: neither "ether" or "lladdr" does work on 10.4.8 Intel !
 

moto21

macrumors newbie
Original poster
Oct 25, 2006
6
0
Sheffield/ Frankfurt
yellow said:
Confirmation, it doesn't work on my MBP.

Thats bad news... really bad news. I have no internet at home and so I see myself wardriving now with a white macbook. Sheffield is a rough place :(

BTW: They will kill you if you'd put a router somewhere. No questions asked just ****ting.
 

Hockeypuck

macrumors regular
Sep 29, 2006
102
0
moto21 said:
Hey I need your help. I got banned from Campus because I treid to solve a email problem on my Macbook (couldnt sent mails on port 25 or 587) and did a Portscan. Bad idea beacuse its seen as an attack on the Uni network and so I was banned with this MAC Address. The guy behind the counter told me that its just the Computer but NOT the USER who is banned, so he told me to get a new MAC Address. I have tried "sudo ifconfig ether" and "lladdr" but both didnt work (either with airport down or up).

I wasnt to sure about tinkering with the driver as explained here:http://www.suspekt.org because my driver hex are a bit different...

Mac Os X 10.4.8
Macbook 2 Ghz


Thank you!

:)

You can't dispute the ban? Completely silly for the guy to tell you just to get a new MAC address.

Your other option would be to hope something goes wrong with the logic board on your macbook so Apple has to replace it! ;)
 

4np

macrumors 6502a
Feb 23, 2005
972
2
The Netherlands
Actually, it does work for en0 (LAN) but it does not work for en1 (Airport).

If you could connect to the LAN you will be able to spoof your MAC address...
 

moto21

macrumors newbie
Original poster
Oct 25, 2006
6
0
Sheffield/ Frankfurt
Hockeypuck said:
You can't dispute the ban? Completely silly for the guy to tell you just to get a new MAC address.

Your other option would be to hope something goes wrong with the logic board on your macbook so Apple has to replace it! ;)


:( No he made it very clear that I would need to write an appeal to the Sysadmins to get that my account freed. And I got to admit: I wouldn't have a chance if they would take the time to analyse the data streams sent over the Uni Network. I know at least 3 occasions where I sent some Music to mates... How should I prove that those are ripped from my cds bach home???

Clearly there must be a chance to change the MAC Address, with Windows its easy! (BTW: If I change the MAC Address in Windows, will it be changed in OS X too?????)
 

4np

macrumors 6502a
Feb 23, 2005
972
2
The Netherlands
I am reading that suspekt.org site you mentioned before and when I read that I'm getting the impression that MAC spoofing is disabled by default in Apple's drivers :S But I guess your already figured that ;)
 

4np

macrumors 6502a
Feb 23, 2005
972
2
The Netherlands
moto21 said:
(BTW: If I change the MAC Address in Windows, will it be changed in OS X too?????)

nope, a MAC address is stored in hardware. If you spoof it in Windows it will be your original value after reboot. However, if you change your driver you could make it permanent. I would prefer being able to use ifconfig though...
 

purelithium

macrumors 6502
May 28, 2006
355
0
Kingston, Canada
if you're desperate enough, pop open the MacBook, pop out the old Airport Extreme Card, and buy a new one, sell the old one 'cause it still works. You'll lose a bit of cash, but it'll be a permanent solution. (unless they made the airport integrated with the logic board, in which case it would be much more difficult
 

aquajet

macrumors 68020
Feb 12, 2005
2,386
9
VA
I would go ahead and draft an appeal to send to the sysadmins. Getting your MAC address reinstated would be the ideal solution.

Can anybody confirm whether or not the MB uses an actual airport extreme card?
 

purelithium

macrumors 6502
May 28, 2006
355
0
Kingston, Canada
moto21 said:
And I got to admit: I wouldn't have a chance if they would take the time to analyse the data streams sent over the Uni Network. I know at least 3 occasions where I sent some Music to mates... How should I prove that those are ripped from my cds bach home???


I'm not a network admin, but I hightly doubt that they keep logs that detailed, that they know the exact type of data that has been transferred from one user to the other, let alone filenames and whether it is legit or not. Unless you really were doing something untoward, then I would simply tell them exactly what you were doing, and I'm sure they will have no problem with reinstating you, or putting the MAC on probation or something. You have nothing to lose in asking.
 

aquajet

macrumors 68020
Feb 12, 2005
2,386
9
VA
Passante said:
Isn;t the MAC address stored on the wireless card? Does Apple sell replacement cards

True, but not all of Apple's machines use the actual Airport Extreme card sold in stores. We haven't gotten a clear answer yet whether or not this is the case with the MB.
 

purelithium

macrumors 6502
May 28, 2006
355
0
Kingston, Canada
IF you need to do something this extreme, here's detailed instructions on how to replace the AP Extreme card.

http://www.ifixit.com/Guide/Mac/MacBook/Airport-Card

28.jpg
 

BillyTheKid

macrumors newbie
Sep 4, 2010
2
0
How to spoof the mac address of the wireless card

With a program called MacSpoofer you can easily change the mac address of any network device (Including the wireless device) from the "System Preference". :) Download it from www.macspoofer.com
 

bigjobby

macrumors 65816
Apr 7, 2010
1,040
0
London, UK
Not pretty but have you tried looking into an external USB ethernet/wireless adaptor? If available, they can't be that expensive.
 

InfoSecmgr

Guest
Dec 31, 2009
324
0
Ypsilanti, Michigan
Step 1: facepalm yourself.

Moving on, port scanning isn't an attack, it is usually used as a pre-attack so that's why they were a bit miffed. You shouldn't do things you have zero knowledge in. Also, what "guy behind the counter" told you this? Go to the IT department and explain what the issue was. They will be irritated but should remove your MAC address from the blacklist. They'll probably put you on some sort of "probation". Just don't do anything...er..."misinformed" at your school again and you should be fine. If they want to argue about it, they can always look at your MAC address for themselves if you take your computer in, check your student ID at the same time just to be sure you aren't covering for some spammer, hacker, etc.

In short, banning a MAC address is NOT permanent and they CAN undo it, but maybe they just don't like you. Sounds like I wouldn't do it either. You googled a few things and thought you could best their IT professionals, very very irritating.

Edit: before any of you ask: M.S. Information Security
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.