Fixed IP Vs Dynamic

From a security point of view is there any advantage or disadvantage of
a fixed IP over a dynamic address.

Geoff Lane

On Thu, 12 Apr 2007 21:27:52 +0100, Geoff Lane
<(E-Mail Removed)> mused:

> From a security point of view is there any advantage or disadvantage of
>a fixed IP over a dynamic address.
>
From a security point of view there is absolutely no difference. Both
have pros and cons mirroring each others.
--
Regards,
Stuart.

Geoff Lane <(E-Mail Removed)> wrote:
> From a security point of view is there any advantage or disadvantage of
> a fixed IP over a dynamic address.

There are pros and cons both ways. Here are two to start you off:

If someone else has triggered a portstorm on a dynamic address,
you might end up being the unlucky recipient when you next connect.
If you trigger a portstorm on a static address, you get what you (may)
deserve. One of these attacks might be a zero day exploit.

If you want to allow connections in to a remote server, it's reasonably
helpful to be able to restrict the permitted IP addresses from which
connections may be attempted. You can't do this if you have a dynamic IP,
but you can with a static one.

The bottom line is probably that it really depends on what you plan
to do with your (home) system(s). If you can give us more detail we'll
probably be able to advise you better.

Chris

In article <evm4o5$ucu$(E-Mail Removed)>, Geoff Lane says...
> From a security point of view is there any advantage or disadvantage of
> a fixed IP over a dynamic address.
>
On a home LAN behind a router, it allows you to find the machine more
easily.

As a DSL connection done via Modem, it allows hackers to concentrate on
you more easily, i.e once they've found you on a static IP, they can
target the same machine time and time again. Doesn't matter with a
router on a static IP because the router firewall blocks.


--
Conor

Light travels faster than sound. This is why some people appear bright
until you hear them speak.........

On Fri, 13 Apr 2007 11:42:07 +0100, Conor <(E-Mail Removed)>
mused:

>In article <evm4o5$ucu$(E-Mail Removed)>, Geoff Lane says...
>> From a security point of view is there any advantage or disadvantage of
>> a fixed IP over a dynamic address.
>>
>On a home LAN behind a router, it allows you to find the machine more
>easily.
>
Although really unless you're just setting up the odd VPN then you
should be using a FQDN and not relying on you keeping your current ISP
and keeping your IP address like you might do a telephone number.

>As a DSL connection done via Modem, it allows hackers to concentrate on
>you more easily, i.e once they've found you on a static IP, they can
>target the same machine time and time again.

But on a dynamic IP the same can be said as unless I reboot the router
the IP is unlikely to change. Also, with a dynamic IP address you
could end up dynamically getting an IP address that someone is
attacking intended for the person who had it previously.

With a decent NAT router\firewall etc... it makes no difference
whether the IP address is static or dynamic, in fact, it doesn't
matter whether you don't have a router etc... then it still makes no
difference.
--
Regards,
Stuart.

Chris Davies wrote:

>> From a security point of view is there any advantage or disadvantage of
>> a fixed IP over a dynamic address.
>
> There are pros and cons both ways.

> The bottom line is probably that it really depends on what you plan
> to do with your (home) system(s). If you can give us more detail we'll
> probably be able to advise you better.

Not doing anything special with my network, it operates behind a Draytek
2600 NAT router.

I've got an old desktop running 98, a laptop running XP Home, a handheld
running PocketPC2003 and a digital TV box that gives the TV internet
access all connecting via WEP (No WPA available) WiFi.

MS machines also run ZoneAlarm.

I do occasionally run a VPN server but I also have a dynamicDNS address
so the dynamic IP address is no problem.

The reason for my enquiry is merely that I may be changing ISPs and one
option issues fixed IP addresses.

Geoff Lane

On Fri, 13 Apr 2007 23:07:46 +0100, Geoff Lane
<(E-Mail Removed)> mused:

>The reason for my enquiry is merely that I may be changing ISPs and one
>option issues fixed IP addresses.
>
If there's an option of a free static IP address I'd take it as some
things are easier with a static IP, such as VPN's for one.
--
Regards,
Stuart.

(E-Mail Removed) declared for all the world to hear...
> On Fri, 13 Apr 2007 23:07:46 +0100, Geoff Lane
> <(E-Mail Removed)> mused:
>
> >The reason for my enquiry is merely that I may be changing ISPs and one
> >option issues fixed IP addresses.
> >
> If there's an option of a free static IP address I'd take it as some
> things are easier with a static IP, such as VPN's for one.

Anything coming "in" to the network is going to be easier with a fixed
WAN IP.
--
Regards
Jon

Conor <(E-Mail Removed)> wrote:
> As a DSL connection done via Modem, it allows hackers to concentrate on
> you more easily, i.e once they've found you on a static IP, they can
> target the same machine time and time again. Doesn't matter with a
> router on a static IP because the router firewall blocks.

Generally the script kiddies don't care who's at an address. They scan
for vulnerabilities and then move on. If you've got someone determined
enough to apply some real grey-matter to your IP address then they'll
find you again even when you've moved on to a new dynamic IP address.

Chris

Geoff Lane <(E-Mail Removed)> wrote:
> I do occasionally run a VPN server but I also have a dynamicDNS address
> so the dynamic IP address is no problem.

If you're using inbound VPN then I'd recommend a static IP address every
time. Dynamic DNS is a cludgy workaround and IMO is yet another thing
that could go wrong just when you really need it.

Chris