Security Basics mailing list archives
Re: Preventing DHCP from allocating IPs
From: Pauling <pauling () Starwolf biz>
Date: Tue, 3 Dec 2002 15:01:37 -0500 (EST)
That works pretty well in most cases, but it won't stop someone really determined from getting onto the network. If you've got time, plug in, start up a sniffer, and watch for DHCP traffic. Wait for someone to go off the air, and change your MAC address to theirs, (love ifconfig) and then grab an IP address and welcome to the network (also in the mean while, while waiting for the DHCP RELEASE, look for POP mail sesions... just in case there is some form of authentication needed to get beyond the network.) Just my $0.02 On Mon, 2 Dec 2002, jon kintner wrote:
I know mac addresses can be spoofed pretty easily, but could you setup an access list or filter that would disallow all mac addresses except for the ones specified on your network(s)? The initial setup would probably be tedious, but it's worked fairly well to keep most unauthorized logins off the network at the college I attend. -jon kintner ----- Original Message ----- From: "Sarbjit Singh Gill" <ssgill () gilltechnologies com> To: <security-basics () securityfocus com> Sent: Monday, December 02, 2002 7:22 AM Subject: Preventing DHCP from allocating IPsGreetings all, How do i prevent a client from getting an IP from my DHCP in an Ethernet network. I know i could reserve IPs for all other clients and nobody getsanIP unless reserved earlier, but i have hundreds of clients. I frequently have visitors who need to plug in their laptops into the network and ihavevisitors who are not allowed to plug in their laptops into the network and get IPs. I do not want these visitors who are not allowed to access the network to get an IP and start accessing internet through my network. What about in a wireless environment. How do i prevent it in a similar capacity. Kind Regards Gill
-- Frank Barton Starwolf.biz Systems Administrator
Current thread:
- Preventing DHCP from allocating IPs Sarbjit Singh Gill (Dec 02)
- RE: Preventing DHCP from allocating IPs Jimmy Sansi (Dec 03)
- RE: Preventing DHCP from allocating IPs Sarbjit Singh Gill (Dec 05)
- Re: Preventing DHCP from allocating IPs jon kintner (Dec 03)
- Re: Preventing DHCP from allocating IPs Pauling (Dec 04)
- Re: Preventing DHCP from allocating IPs Tony Meman (Dec 06)
- RE: Preventing DHCP from allocating IPs Rick Darsey (Dec 04)
- Re: Preventing DHCP from allocating IPs jon kintner (Dec 04)
- RE: Preventing DHCP from allocating IPs Sarbjit Singh Gill (Dec 05)
- Re: Preventing DHCP from allocating IPs Hasnain Atique (Dec 06)
- RE: Preventing DHCP from allocating IPs Sarbjit Singh Gill (Dec 06)
- Re: Preventing DHCP from allocating IPs Hasnain Atique (Dec 06)
- Re: Preventing DHCP from allocating IPs Tony Meman (Dec 09)
- Re: Preventing DHCP from allocating IPs jon kintner (Dec 09)
- Re: Preventing DHCP from allocating IPs Gene (Dec 11)
- Re: Preventing DHCP from allocating IPs Pauling (Dec 04)
- RE: Preventing DHCP from allocating IPs Jimmy Sansi (Dec 03)