How would you go about blocking static ip. -----Original Message----- From: Arnt Karlsen [mailto:arnt@xxxxxxx] Sent: Thursday, May 29, 2003 2:19 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: Blocking Windows On Thu, 29 May 2003 11:27:11 -0400, Dominic Irrcher <dirrcher@xxxxxxxxxxxxx> wrote in message <C037E4BA8D79D71196AF00805F777E98028A0C@xxxxxxxxxxxxxxxxxxxxxx>: > what about giving each os a different ip ? > > then when users boot up into windows, block those ips you gave the > windows hosts. > > ie. 192.168 on linux, and 10.10 on windows, block all 10.10 on the > LAN! > > something along those lines ..can also be automated to first block _everything_, then hear dhcp ip request broadcasts from clients, then first check os with nmap or nessus before award an ip from dhcp. Static ip tricksters can be blocked too. ..yet another option is run a ipv6 gateway, I don't believe wintendo can do ipv6, concequently they will be kept nicely off Internet, can some wintendoite confirm or refute me here? -- ..med vennlig hilsen = with Kind Regards from Arnt... ;-) ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case.
