Re: MAC Filtering

From: Jouni Malinen (
Date: 2001-12-16 18:55:32 UTC

On Sun, Dec 16, 2001 at 06:40:11PM +0000, Jerritt Collord wrote:

> That being said, I think a userspace handler for association requests
> would be interesting.

My current plan is to add mechanism for registering a userspace handler for 802.11 {,de}authentication and {,re,dis}association frames. I have not yet decided, whether this would completely replace the functions or would there still be a minimal version (like the current code) in the kernel driver. Anyway, the driver would still need most of the data from those frames, so either the userspace handler has to give this information back to the driver or the driver has to parse this itself.

I think I will first experiment a bit with a version that would require a userspace handler and all auth/assoc processing would be done in userspace. The handler would parse the needed information and would then pass it to the kernel driver. This would make it easy for anyone to add MAC filtering or whatever extensions seen useful in the userspace daemon. In addition, it would be possible to use a database for authentication data and logging, etc.

Jouni Malinen                                            PGP id EFC895FA

This archive was generated by hypermail 2.1.4.