Private Network Scan

nicholaskids

Is there a way using fingbox, let's say my own private network, I can prevent other clients from scanning the network for details like IP address and MAC? Only I as the owner can do this and fingbox will prevent anybody from doing so if they do not have permission.

Marc

Hi @nicholaskids, this is something Fing can’t do, though it can block someone from entering your network from the start.  Is this your home network?  Do you currently have consumer grade networking equipment?  If so those generally don’t support that either. @Ciaran, is this something that is feasible from Fing and if so can this be moved to feature request section?  @kltaylor, @Crowgrandfather, @Pixelpopper, @Hronos , have you ever heard of a third party product that can do this?

Hronos

No, for example: to not have a MAC Address on a device, the device first can deny access to its ARP table (like an iPhone does) but if there is access, the 2nd is make that ARP table blank, this is not possible, every device that make a conversation (connection) with another share their MAC Address. To reduce the table items maybe you can block ICMP (PING, some firewalls/routers do this) but there is always a way...

Hronos

As @Marc mention, with enterprise grade gear you con block better, with VLANs and rules...

You can try in a home grade router, to isolate the clients (no one see each other in the network, like a guest Wi-Fi network) but is bidirectional the "owner" also can't see other devices)

[Deleted User]

The user and all related content has been deleted.

vulcansheart

As @Hronos said, your best solution on consumer grade gear is to enable guest mode client isolation and VLANs if that is an option. Once a device is on your network, there is no way to stop it from broadcasting ARP, UPnP, and echo requests. You can only try to isolate the device.

Crowgrandfather

I'm not sure of anything outside of vlans that could prevent scanning like that.

VioletChepil

@Marc I could move to feature requests but I'm not sure it is feasible. 
Maybe better to start a discussion up on how VLANs could prevent scanning like that? As mentioned by @Crowgrandfather?
What do you think @crowgrandfather @marc @nicholaskids

Marc

+1 for a new discussion...  could even be a subset of a broader topic on how to harden and secure your home network.

VioletChepil

@Marc feel free to start that up and I'll gladly promote it! 

Marc

@VioletChepil , done!