Mac block or Prevent DOS attack in DHCPv6

Eustace, Glen G.Eustace at massey.ac.nz
Wed Nov 20 18:35:15 UTC 2013


On 20/11/2013, at 6:05 pm, Amit <amit.kr at nic.in<mailto:amit.kr at nic.in>> wrote:

And secondly, In my network due to some bug in HP printer, it is generating many DHCP REPLY request per second and hence keeping dhcp busy.
Do we have any option to deny such client in dhcp itself as It seems impossible to block such client using mac address as the dhcp packets are relayed by an router


You will find that APC UPS Network management cards have the same issue.  Our solution with these (being the only thing that worked) was to turn off IPv6 at the client.  Not really an approrpiate soliution but getting APC or HP to look at/fix their products wasn’t going to happen.

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Glen Eustace, Infrastructure Development Engineer (BC/DR)
Information Technology Service, Massey University PN460
Tennent Drive, Palmerston North, New Zealand
Ph: +64-6-9516005, Fax: +64-6-3505607, Mob: +64-27-4500321





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20131120/15ab704f/attachment.html>


More information about the dhcp-users mailing list