Firewall Wizards mailing list archives

Re: Using DHCP (was RE: IP Spoofing)


From: Joseph S D Yao <jsdy () cospo osis gov>
Date: Mon, 4 Oct 1999 12:22:39 -0400 (EDT)

Neither DNS not DHCP is a cure for spoofing, and can themselves be
spoofed as well ;-(  But they are key tools and properly configured can
support the evidence of logs in tracing problems and intrusions.

If you know of a way to spoof DNS when it is used with PKI authentica-
tion, I'd like to hear it.  ;-)

--
Joe Yao                         jsdy () cospo osis gov - Joseph S. D. Yao
COSPO/OSIS Computer Support                                     EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.



Current thread: