Secure Wi-Fi Access — Automated MAC Whitelisting, Intruder Blocking & Live Monitoring

1. Introduction

The Secure Wi-Fi Access with MAC Address Filtering is a Python-based project that enforces device-level access control on your wireless network. It authenticates devices via a registered MAC whitelist, monitors who’s connected, and blocks unknown devices automatically. Perfect for homes and small offices seeking lightweight, effective Wi-Fi hardening.

2. Existing System vs Proposed System

3. Working

1. Network Scanning: Periodic ARP/ICMP/port sweeps to enumerate devices.
2. Device Identification: Extract MAC/IP and vendor info (OUI).
3. Authorization Check: Compare to whitelist in SQLite/CSV.
4. Action Execution: Authorized → allow; Unauthorized → block via router/OS.
5. User Notification: Email/popup alert on unknown device detection.
6. Dashboard View: Real-time tables for Connected / Blocked / Authorized.

4. Technology Stack

• Language: Python
• Libraries: scapy, os, subprocess, time, pandas, Flask/Tkinter
• Networking Tools: arp-scan / Nmap integration
• Database: SQLite3 or CSV (whitelist & logs)
• Optional Integrations: Router API/SSH, SMTP alerts

5. Modules

6. Advantages

• High-level Wi-Fi control via MAC-based auth.
• Automated monitoring and instant blocking.
• Friendly UI — no router page digging required.
• Cross-platform with router/firewall integrations.
• Prevents hijacking and bandwidth theft.

7. Applications

• Home networks (family devices only).
• Start-ups & small offices.
• Institutions with controlled Wi-Fi access.
• Cyber labs & IoT testbeds with restricted usage.

Python Integration Sketch (Scapy + arp-scan/Nmap + Router/OS)

# 1) Scan network (choose one)
def scan_devices(cidr):
    # Option A: scapy ARP ping
    ans, _ = scapy.arping(cidr, timeout=2, verbose=0)
    devices = [{"ip": rcv.psrc, "mac": rcv.hwsrc} for snd, rcv in ans]
    # Option B: call arp-scan/nmap via subprocess and parse output
    return enrich_with_vendor(devices)  # OUI lookup

# 2) Authorization check
def is_authorized(mac):
    return db.whitelist.exists(mac.lower())

# 3) Enforcement
def block_device(mac, ip=None):
    if router_api_available():
        router.block_mac(mac)          # vendor-API/SSH command
    else:
        os_firewall_block(ip or mac)    # platform-specific deny

# 4) Loop
def monitor_loop():
    while True:
        devices = scan_devices("192.168.1.0/24")
        for d in devices:
            if not is_authorized(d["mac"]):
                alert(f"Unknown device: {d['ip']} {d['mac']}")
                block_device(d["mac"], d["ip"])
                db.log_event("blocked", d)
        time.sleep(SCAN_INTERVAL)
              

What You Get