Re: Deny client from obtaining IP address

["Maurice Smit" <m.smit () dsinet org>]

Why don't you use static ip addresses? Allow those you know, deny the ones
unknown. This is also easier for accountability.
Or, get to know the MAC addresses from the ones that are allowed to connect,
and use that as a whitelist in your DHCP config. This is not totally
secure, since one can spoof a MAC address. But it's a start.

regards,

Maurice Smit, CISSP

On Thu, July 27, 2006 18:24, rolando_ruiz () jetaviation com wrote:
> Hello all,
>
>
> Is there a way that in DHCP or so, one can deny a client computer from
> obtaining an IP address? We use Microsoft servers ADS environment and I'd
> like to allow only those we want to obtain an IP address. I don't want to
> make it too restricted where authorized users are unable to connect. I'm
> sure there are some 3rd party apps that can handle this and I welcome
> suggestions on those also. This is a solution for denying connectivity to
> outsiders.
>
> Thank you
>
>
>
>
> -------------------------------------------------------------------------
> --
> This list is sponsored by: Norwich University
>
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec
> management education and the case study affords you unmatched consulting
> experience. Using interactive e-Learning technology, you can earn this
> esteemed degree, without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------------------
> -



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------