Probing problem in hidden SSID with Mac filtering

Installing and Using OpenWrt Network and Wireless Configuration
1

I've come to know that when mac filtering is enabled in openwrt with hidden ssid the router only response the probe from the listed MAC addresses only.
One of my device (client) has always same static MAC address that's why it is able to connect to the router.
But my Android device may be probing with random MAC address each time. For this reason the router is not responding and the Android phone can't discover the SSID.
As I can't change the Android's behaviour (not rooted) so how can I set openwrt to response to any mac address probing but only connect to the listed MACs?

The stock firmware (mi router 4a) was able to do that and I can't loose the feature.

2

And you are absolutely sure of it?

https://www.howtogeek.com/722653/how-to-disable-random-wi-fi-mac-address-on-android/#how-to-disable-randomized-mac-addresses-on-android

3

Yes. I had the option of "device mac address" in wifi setting and "nonpersistent randomised mac" in developer option. Altering these didn't work

4

Disable both pseudo-security measures., they are broken by a passive observer once a client connec%s

1 Like
5

Additionally, a hidden SSID means your phone has to occasionally probe for the SSID, no matter where the device is located. Hence a hidden SSID could leak Personally Identifiable Information about you when you're away from home.

6

I know. But I want some normal people around me not to see my SSID on their device. They can't just write airodump-ng command in terminal. (And I turn off my wifi on device when I go out.) Above it I want mac filtering to avoid QR code sharing.
So what's the solution?

7

I can assure you there are no passive observer living around my appartment. Although the security is false, I want the cool feature of hidden ssid with mac filtering that was previously available.

8

Randomize AP MAC if you want something harmless and less seen.

9

This was discussed recently... you might want to read this thread:

10

You guys are misunderstanding me. I know the security issue and I accept it. What I really want is to make openwrt to response to any random mac prob at any cost. That's all I want.

By the way I hate Apple as it is not open source.

11

It is already randomized in luci. But that's not the point. I just want the mentioned feature even someone hacks my router.

12

If you want it to respond to any random MAC, turn off MAC filtering.

1 Like
13

That's the problem in openwrt. It does not allow hidden ssid and mac filtering at the same time. I believe there is a way like configuring hostapd or something like that.

14

If you search the forum, this does seem to be the case. I don't know if this is a limitation based on the technical underpinnings, or if it is a bug. Regardless, I don't think any of the devs think this is something that needs to be addressed since the hidden SSID is a fools errand in terms of security, and MAC filtering is also a very weak security measure.

15

If the developers think these two are risky for security then why have they still kept them as features in openwrt firmware? They could just vanish the option.

Whatever, I am not going to argue further.

Please reply only if you know the how to change some configuration in openwrt to work mac filtering (random mac probing) with hidden ssid.

16

I dare to reply that upstream product works identically on ubuntu. Developers took it unmodified.

You are colluding meanings of insecure vs no security benefit.

1 Like