Vulnerability Development mailing list archives

Re: swbell DSL bug ?


From: jamie.phillips () NS SYMPATICO CA (J . Phillips)
Date: Mon, 8 May 2000 09:36:46 -0300


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Absolutley,  my DSL provider's DHCP will only assign an IP to the MAC
address on the NIC they provided, and it is always the same internal
IP.  There are however ways to change the burned in address, with
which you could theoretically borrow someone else's IP on the same
subnet, provided they did not have an IP already leased.(or perhaps
even if they do??.)

Jamie

- -----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of
Seth
R Arnold
Sent: May 7, 2000 9:57 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: swbell DSL bug ?

Ryan, that just means they don't keep good enough track of things --
dhcp servers can be configured to assign leases only for certain
MACs.

* Ryan Sweat <batrox () SWBELL NET> [000507 17:13]:
     Southwester Bell is a big provider of dsl access in some parts
of the US.  Dhcp provides an IP address and the lease expires in
about 72 hours.  They claim the IP cannot be changed, however when
playing around last night, I found if you install another ethernet
card, and switch the cable to the new card, it happily gives you
another IP address.  The dhcp server must rely on mac address when
providing a lease for an ip.  This could pose many problems.  How
can accounting be kept when a user can change his ip whenever he
likes?  I have more testing to do, but I do not see why you couldnt
install a few nic cards and get ip address for each one, which
swbell would like to charge you much more money for.  I am looking
into a way to change the mac address in windows. I know it can be
done in linux through ifconfig.  Maybe somone has experience in
this ??

batrox () swbell net


- --
Seth Arnold | http://www.willamette.edu/~sarnold/
Hate spam? See http://maps.vix.com/rbl/ for help
'Netscape engineers are weenies!' -- Microsoft

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com>

iQA/AwUBORa03tGSUCkLAscrEQIQMACfU6bo3nrovauUJQZhGN1ng/wcndgAn0+9
587Xyuwz7Zn7TvnJAotgyL4s
=+yJR
-----END PGP SIGNATURE-----


Current thread: