routing security with DHCP

Is it possible to prevent users without an IP address assigned by DHCP from
accessing a network by assigning themselves a fixed local IP address &
gateway? I use bind9 to resolve addresses on this box, I am thinking of
unresolvable addresses not being able to gain access to the network/gateway.
--
BD

yes, but it doesn't do what you want to do:

http://lists.q-linux.com/pipermail/p...er/030793.html

You want to do that in your iptables/firewall - you can allow by mac address
or ip or ip range. mac address would probably be most effective for blocking
the casual interloper.

"Brian D" <(E-Mail Removed)> wrote in message
news:4C8564216D%(E-Mail Removed)...
> Is it possible to prevent users without an IP address assigned by DHCP
from
> accessing a network by assigning themselves a fixed local IP address &
> gateway? I use bind9 to resolve addresses on this box, I am thinking of
> unresolvable addresses not being able to gain access to the
network/gateway.
> --
> BD
>

Brian D wrote:

> Is it possible to prevent users without an IP address assigned by DHCP
> from accessing a network by assigning themselves a fixed local IP address
> & gateway? I use bind9 to resolve addresses on this box, I am thinking of
> unresolvable addresses not being able to gain access to the
> network/gateway.

You can filter on MACs at the firewall, but you may also want to scan your
arp cache for unauthorized MACs.

--

Fundamentalism is fundamentally wrong.

To reply to this message, replace everything to the left of "@" with
james.knott.