RE: Bogus DHCP server in the network....

[sean.kelly () lanston com]

> From: TUDOR PANAITESCU [mailto:tpanaitescu () usa net]
>
> Here's the picture. I am a client of Adelphia PowerLink 
> CableTV. They use DHCP for giving IP addresses.
...
> I believe it is a UNIX box, most likely
> LINUX with NAT. Now here comes the question: is anything 
> there we can do to block this guy ?

The first thing that comes to mind, and probably the best solution, would be
to send mail to your isp -- the abuse address.  Include everything you know
about the person (MAC address, IP, etc).  If you can, include testimonials
from other users and specify how long it's been going on.  If one of their
customers is screwing up access for other customers then he is either
ignorant and should be told to correct the problem, or he is malicious and
he should either be warned or have his service terminated.  Hacking his
machine is not a good solution -- then he can report YOU and if he is a
hacker then it will also anger him and you don't want to be any more of his
target than you are.


Sean