Static IP or not?

I am on the point of signing up with Newnet, and it seems I have the
choice of a static or dynamic IP. Any views on the relative merits?

CLearly, static is more convenient if I am away and want to log in to my
home machine. And it would mean my email could be delivered promptly
without the trouble of polling for it (e.g. using ODMR).

But dynamic should be more secure (assuming I regularly exchanged it for a
new one), so less need for firewalling (being on a Sparc Solaris system I
am already in a safer situation that your usual Wintel guy, and closing
off a few ports and maybe using ipfilter would hopefully be enough).

--
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131 Fax: +44 161 436 6133 Web: http://www.cs.man.ac.uk/~chl
Email: (E-Mail Removed) Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9 Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5

On Thu, 1 Jun 2006 11:24:20 GMT, "Charles Lindsey" <(E-Mail Removed)>
wrote:

>I am on the point of signing up with Newnet, and it seems I have the
>choice of a static or dynamic IP. Any views on the relative merits?
>
>CLearly, static is more convenient if I am away and want to log in to my
>home machine.

Or just about anything involving vpns.

>And it would mean my email could be delivered promptly
>without the trouble of polling for it (e.g. using ODMR).

Assuming you want the hassle of running your own MTA and handling incoming
spam congesting other traffic.

Personally I'd take a cron job running every 15-20 mins over that anyday.

>But dynamic should be more secure (assuming I regularly exchanged it for a
>new one),

It's not.

Malcontents will scan the entire cidr blocks looking for vulnerabilties.

Address changes will not hide vulnerabilties.

>so less need for firewalling (being on a Sparc Solaris system I
>am already in a safer situation that your usual Wintel guy, and closing
>off a few ports and maybe using ipfilter would hopefully be enough).

I would recommend ipf at the very least, with a default block policy.




greg

--
If you want venality, if you want ignorance, if you want drunkenness,
and facility for being intimidated; or if, on the other hand, you
want impulsive, unreflecting, and violent people, where do you look
Do you go to the top or to the bottom?

On Thu, 1 Jun 2006 11:24:20 GMT, Charles Lindsey wrote:

> I am on the point of signing up with Newnet, and it seems I have the
> choice of a static or dynamic IP. Any views on the relative merits?
>
> CLearly, static is more convenient if I am away and want to log in to my
> home machine. And it would mean my email could be delivered promptly
> without the trouble of polling for it (e.g. using ODMR).
>
> But dynamic should be more secure (assuming I regularly exchanged it for a
> new one), so less need for firewalling (being on a Sparc Solaris system I
> am already in a safer situation that your usual Wintel guy, and closing
> off a few ports and maybe using ipfilter would hopefully be enough).

A dynamic IP is no more secure because you change it regularly (that's a
myth) and there's *always* a need for a firewall.

You can get to a dynamic IP by using a Dynamic DNS service such as
dyndns.org but if you have the choice then go for a fixed IP especially if
you can get a reverse DNS and want to run a mail server.

Regards

Bill

On Thu, 1 Jun 2006 11:24:20 UTC, "Charles Lindsey"
<(E-Mail Removed)> wrote:

> But dynamic should be more secure (assuming I regularly exchanged it for a
> new one), so less need for firewalling

Please! You don't REALLY believe that, do you Charles? The IP scans will
still get you...

> (being on a Sparc Solaris system I
> am already in a safer situation that your usual Wintel guy

safer, but not safe...

> and closing
> off a few ports and maybe using ipfilter would hopefully be enough).

The use of the word 'hopefully' in a security context makes me
shudder....

Get a static IP, because it's useful. Then set up a proper firewall.

--
[ 7'ism - a condition by which the sufferer experiences an inability
to give concise answers, express reasoned argument or opinion.
Usually accompanied by silly noises and gestures - incurable, early
euthanasia recommended. ]

"Charles Lindsey" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I am on the point of signing up with Newnet, and it seems I have the
> choice of a static or dynamic IP. Any views on the relative merits?

Static every time - don't even need to think about it.

> CLearly, static is more convenient if I am away and want to log in to my
> home machine. And it would mean my email could be delivered promptly
> without the trouble of polling for it (e.g. using ODMR).
>
> But dynamic should be more secure (assuming I regularly exchanged it for a
> new one), so less need for firewalling (being on a Sparc Solaris system I
> am already in a safer situation that your usual Wintel guy, and closing
> off a few ports and maybe using ipfilter would hopefully be enough).

It's no more secure to have a dynamic IP.

"Alastair" <(E-Mail Removed)> wrote in message
news:447fe5a3$0$661$(E-Mail Removed)...

> It's no more secure to have a dynamic IP.

Its a lot easier to get back on forums, etc. when you have been banned with
a dynamic IP.

"dennis@home" <(E-Mail Removed)> wrote in message
news:9cSfg.79699$(E-Mail Removed). uk...
>
> "Alastair" <(E-Mail Removed)> wrote in message
> news:447fe5a3$0$661$(E-Mail Removed)...
>
>> It's no more secure to have a dynamic IP.
>
> Its a lot easier to get back on forums, etc. when you have been banned
> with a dynamic IP.

Use a static and don't get banned! The next dynamic you get may have been
banned for reasons nothing to do with you.

> Its a lot easier to get back on forums, etc. when you have been banned with
> a dynamic IP.

The answer to that is in your own hands. Dont get banned.

In message <9cSfg.79699$(E-Mail Removed) >,
"dennis@home" <(E-Mail Removed)> writes
>
>"Alastair" <(E-Mail Removed)> wrote in message
>news:447fe5a3$0$661$(E-Mail Removed). ..
>
>> It's no more secure to have a dynamic IP.
>
>Its a lot easier to get back on forums, etc. when you have been banned with
>a dynamic IP.
>
Can't resist........If you are a compete tosser or a spammer then
dynamic is best then! Apart from that an IP check is trivial to get
around.
--
Pete Devlin
[{//////news03//////at\\\\\secondrow/////co\\\\\uk}]
"And don’t forget my dog, fixed and consequent"