DHCP security

Mike C mike.cohler at gmail.com
Tue Oct 9 20:15:03 UTC 2007


Ashley M. Kirchner <ashley <at> pcraft.com> writes:
> So the question now 
> is, is there some way to restrict traffic to only those assigned IPs 
> (through DHCP) and block anything else that happens to show up on the 
> network?  Maybe through iptables somehow?

You can usually arrange to restrict machine that connect to only those with
specified MAC address on the connecting interface - whilst this can be worked
around by someone clever they would need to spoof the known MAC address of one
of the machine in your list - but it is safer than not having a restriction to
only known MAC addresses
HTH






More information about the users mailing list