[Fedora] Re: DHCP security

[Andy Green]

Somebody in the thread at some point said:

>    The DHCP server is configured to only service known MAC addresses,
> however this won't stop an unknown MAC from getting onto the network
> with an available IP already configured.  DHCP server won't know about
> it and thus won't do anything about it.  So to me, this is something
> beyond what the DHCP server itself can do (or should do).  That's what
> I'm looking for, some way to block everything else that may pop up, that
> did not use the DHCP server to get an IP to begin with.

Little-known thing, wpa_supplicant can work with wired networks too
(-Dwired).  If everyone on the network has to know the WPA encryption
passphrase to even talk that is going to cause trouble for MAC-fondlers
and other scoundrels.

You use hostap on one box for the others to authenticate against, a sort
of wired "access point".

Of course, it doesn't necessarily help much if mortal users (or they are
root themselves) can read /etc/wpa_supplicant/wpa_supplicant.conf and
see your keys...

-Andy