DHCP security

[kalinix]

On Tue, 2007-10-09 at 20:15 +0000, Mike C wrote:
> Ashley M. Kirchner <ashley <at> pcraft.com> writes:
> > So the question now 
> > is, is there some way to restrict traffic to only those assigned IPs 
> > (through DHCP) and block anything else that happens to show up on the 
> > network?  Maybe through iptables somehow?
> 
> You can usually arrange to restrict machine that connect to only those with
> specified MAC address on the connecting interface - whilst this can be worked
> around by someone clever they would need to spoof the known MAC address of one
> of the machine in your list - but it is safer than not having a restriction to
> only known MAC addresses
> HTH
> 
> 
> 

You can use NetReg (http://netreg.sourceforge.net/) to strengthen your
dhcp access. On the other hand you can user arpwatch to see if a system
changes it's hw address. And last, but not least you can use an
authenticated firewall (NuFW comes right now into my mind).


HTH



Calin

=================================================
Isn't it strange that the same people that laugh at gypsy fortune
tellers take economists seriously?