Re: DHCP security

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2007-10-09 at 20:15 +0000, Mike C wrote:
> Ashley M. Kirchner <ashley <at> pcraft.com> writes:
> > So the question now 
> > is, is there some way to restrict traffic to only those assigned IPs 
> > (through DHCP) and block anything else that happens to show up on the 
> > network?  Maybe through iptables somehow?
> 
> You can usually arrange to restrict machine that connect to only those with
> specified MAC address on the connecting interface - whilst this can be worked
> around by someone clever they would need to spoof the known MAC address of one
> of the machine in your list - but it is safer than not having a restriction to
> only known MAC addresses
> HTH
> 
> 
> 

You can use NetReg (http://netreg.sourceforge.net/) to strengthen your
dhcp access. On the other hand you can user arpwatch to see if a system
changes it's hw address. And last, but not least you can use an
authenticated firewall (NuFW comes right now into my mind).


HTH



Calin

=================================================
Isn't it strange that the same people that laugh at gypsy fortune
tellers take economists seriously?

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux