Re: RIAA Notices

[John Lerchey <lerchey () ANDREW CMU EDU>]

All,

Our DHCP logs can map an IP back to a MAC address (our wireless systems are not static) which allows us to determine 
the owner of the system in the DCMA notice.

Not too hard, just requires appropriate logging. :)

Thanks,

John

> -----Original Message----- From: The EDUCAUSE Security Constituent Group
> Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of John Kaftan
> Sent: Monday, January 26, 2009 9:51 AM To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] RIAA Notices
>
> This is a problem for us too.  We have a hard time identifying the students as
> we NAT them all to a single IP on their way out.  When we get an RIAA Notice
> it just tells us that someone was uploading from our NATted address.  That
> does not help me much.
>
> Do your students all have routable IPs?  I don't see how I could positively
> prove a student was uploading unless they have routable IPs. Am I missing
> something?
>
>
>
> Timothy Payne wrote:
> > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> >
> > We use Campus Manager to identify the registered user of the device (when
> > they are on ResNet), and they get a nice invitation to go see the Dean of
> > Students.  We do not block P2P traffic, but limit user's bandwidth based on
> > total demand using our NetEqualizer.
> >
> > - -- Tim Payne, CISSP, CCNA Network Administrator Macalester College
> >
> >
> > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32)
> >
> > iD8DBQFJfdR+/QtPr0ClP+0RAsBhAKCALWQb1u/65uQ3a9S9mQgG+JoLKgCeP8ED
> > 6OrNXL/FyMSzPAk+q5D1u/8> =p655 -----END PGP SIGNATURE-----


John K. Lerchey
Coordinator for Incident Response
Information Security Office
Carnegie Mellon University