MAC and gateways



Hi,

I have a problem regarding preservation of MAC addresses in packets
when they cross gateways.
My question is basically if it is possible to preserve the MAC address
somehow as the packet cross the gateway.
F.ex. I have the following setup:

internet
|
ip public
Linux Server
ip 10.0.0.1
|
ip 10.0.0.2
Router A (linux based)
ip 10.0.1.1
|
10.0.1.2
Router B (linux based)
10.0.2.1
|
10.0.2.2
Client (linux based)

So if the Client sends a packet to the Server, I notice that the MAC
address of the packet as it is reaching the Server is no longer the
MAC of the Client, but equals the MAC of Router A ip 10.0.0.2

I am designing a special system, where I need to authenticate the
Client based on the MAC address and the IP of the Client (so only to
let the packet thru at the server if MAC and IP matches an entry in a
table). But if the MAC address changes then this is a problem
obviously.
So is it inherent in the protocols that the MAC changes over a
gateway, or can I change the routing somehow maybe? or can I do some
magic with the ARP tables? I should mention I have full control of all
the servers and routers and clients in this setup so a hack can also
work :-) just not really sure how to attack this problem. If it helps,
the Routers and the Clients are running RouterOS (Mikrotik), the
Server is running RH 9
Any help/ideas would be appreciated. Thanks.

Regards,
Tobias

.



Relevant Pages

  • Re: Can Known Hardware ID Make You Discoverable?
    ... Only the ethernet packet header contains the source MAC ... The MAC addresses just don't go through the router. ... for the local university redisential network details. ... effective were web pages that would try to identify client computers. ...
    (comp.security.misc)
  • Re: How to track down a wireless hacker
    ... client station transmitting on the same channel. ... since it's trivial to change the software MAC address, ... It seems like what the client is asking would just be a snipe hunt. ... Of course you need a packet capture for that, ...
    (Pen-Test)
  • RE: Transfer a sending packet to upper TCP/IP protocol layer in IM
    ... In such case he has no option, other than dealing with MAC addresses, and, ... The proper way to do this is to add your IPv4 header, ... IPv4 header will be larger than the MTU. ... After prepending IPv4 header and UDP header to the original IPv6 packet, ...
    (microsoft.public.development.device.drivers)
  • Re: gateway IP address
    ... Ethernet is Layer 2, IP is Layer 3. ... Layer 2 uses MAC address, and Layer 3 uses IP address. ... send the Ethernet frame to the router, so that it can pass it to the device ... the packet to the router. ...
    (comp.dcom.sys.cisco)
  • Re: Would a firewall have protected Jammie Thomas from being sued by the RIAA Safenet
    ... As most LAN are ethernet nowdays you'll find them ... a MAC address is not part of the routed IP packet. ... original frame which arrived at the router is not visible anymore. ...
    (comp.security.firewalls)