How can I forbid access to customer that force their IP to static ...

Mark Huth mhuth at mvista.com
Sat Jul 7 00:24:35 UTC 2007 

I don't see how you can use DNS to enforce something on a node that 
doesn't use DNS - seems futile.  There are security devices that will 
monitor and interfere with packets from bad boys, but it gets 
interesting to use them with learning bridges (switches).  You can also 
do it with layer 3 switching.

Mark Huth
Sébastien CRAMATTE wrote:
> seems that  deny client-updates is related only dynamic dns updates ...
> I  don't search for this ...
>
> I mean that our users sometines open their windows network properties
> and cut/paste from  a simple "C:\>ipconfig /all"  output
> ...
>
>
>
> Migneron Richard escribió:
>   
>> Content-Type: multipart/alternative;
>> 	boundary=Apple-Mail-1--700833459
>>
>> --Apple-Mail-1--700833459
>> Content-Transfer-Encoding: quoted-printable
>> Content-Type: text/plain;
>> 	charset=WINDOWS-1252;
>> 	delsp=yes;
>> 	format=flowed
>>
>> I think you want :  deny client-updates;  (or ignore) !
>>
>> There's lot more right in the man page !  Either   dhcpd.conf  or =20
>> dhcp-options   you'll manage to read then about 20 times until you =20
>> have your configuration setup completely !
>>
>> Cheers,
>>
>> Richard
>> _______________________________________________
>> Richard Migneron
>> @ : richard at migneron.com
>> T=E9l. : +33.(0)1.45.45.13.92 - Fbox: +33.(0)9.50.70.23.92 - Fax: +33.=20=
>>
>> (0)9.55.70.23.92
>> Yahoo Messenger ID: rmigneron
>> PGP Fingerprint : EFFE 44E3 894A 7051 F86E E532 4880 9534 E1FB DB33
>> "J=92vous ai d=E9j=E0 dit que je pr=EAtais du pognon =E0 des taux =
>> vraiment pas =20
>> d=E9gueulasses ?",
>> Venec, Kaamelott, Livre II, Plus pr=E8s de Toi
>>
>>
>> On 7 juil. 07, at 00:44, S=E9bastien CRAMATTE wrote:
>>
>>   
>>     
>>> Hello,
>>>
>>> How can I forbid access to customer that force their IP to static ...
>>> Some customers change their windows property and force the IP as
>>> be a static one ...
>>>
>>> I would like to prevent this ...
>>> Does it exists a feature inside dhcpd to do this ?
>>>
>>> Regards
>>>
>>>
>>>
>>>     
>>>       
>> --Apple-Mail-1--700833459
>> Content-Transfer-Encoding: quoted-printable
>> Content-Type: text/html;
>> 	charset=WINDOWS-1252
>>
>> <html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
>> -webkit-line-break: after-white-space; ">I think you want : =A0deny =
>> client-updates; =A0(or ignore) !<div><br =
>> class=3D"webkit-block-placeholder"></div><div>There's lot more right in =
>> the man page ! =A0Either =A0 dhcpd.conf =A0or dhcp-options =A0 you'll =
>> manage to read then about 20 times until you have your configuration =
>> setup completely !</div><div><br =
>> class=3D"webkit-block-placeholder"></div><div>Cheers,</div><div><br =
>> class=3D"webkit-block-placeholder"></div><div>Richard<br><div> <span =
>> class=3D"Apple-style-span" style=3D"border-collapse: separate; =
>> border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Comic Sans =
>> MS; font-size: 11px; font-style: normal; font-variant: normal; =
>> font-weight: normal; letter-spacing: normal; line-height: normal; =
>> text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: =
>> 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; =
>> white-space: normal; widows: 2; word-spacing: 0px; "><span =
>> class=3D"Apple-style-span" style=3D"border-collapse: separate; =
>> border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Comic Sans =
>> MS; font-size: 11px; font-style: normal; font-variant: normal; =
>> font-weight: normal; letter-spacing: normal; line-height: normal; =
>> text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: =
>> 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; =
>> white-space: normal; widows: 2; word-spacing: 0px; "><span =
>> class=3D"Apple-style-span" style=3D"border-collapse: separate; =
>> border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Comic Sans =
>> MS; font-size: 11px; font-style: normal; font-variant: normal; =
>> font-weight: normal; letter-spacing: normal; line-height: normal; =
>> text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: =
>> 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; =
>> white-space: normal; widows: 2; word-spacing: 0px; "><div style=3D"; =
>> font-family: Helvetica; font-size: 12px; "><span =
>> class=3D"Apple-style-span" style=3D"font-family: Helvetica; font-size: =
>> 12px; "><font class=3D"Apple-style-span" face=3D"Comic Sans MS" =
>> size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: =
>> 11px;">_______________________________________________</span></font></span=
>>   
>>     
>>> </div><div style=3D"">Richard Migneron</div><div style=3D"">@ : <a =
>>>     
>>>       
>> href=3D"mailto:richard at migneron.com">richard at migneron.com</a></div><div =
>> style=3D"">T=E9l. : +33.(0)1.45.45.13.92 -=A0Fbox: +33.(0)9.50.70.23.92 =
>> - Fax: +33.(0)9.55.70.23.92</div><div style=3D"">Yahoo Messenger ID: =
>> rmigneron</div><div style=3D"">PGP Fingerprint : EFFE 44E3 894A 7051 =
>> F86E E532 4880 9534 E1FB DB33</div><div style=3D"">"J=92vous ai d=E9j=E0 =
>> dit que je pr=EAtais du pognon =E0 des taux vraiment pas d=E9gueulasses =
>> ?",</div><div style=3D"">Venec, Kaamelott, Livre II, Plus pr=E8s de =
>> Toi</div><br class=3D"Apple-interchange-newline"></span></span></span> =
>> </div><br><div><div>On 7 juil. 07, at 00:44, S=E9bastien CRAMATTE =
>> wrote:</div><br class=3D"Apple-interchange-newline"><blockquote =
>> type=3D"cite"><div style=3D"margin-top: 0px; margin-right: 0px; =
>> margin-bottom: 0px; margin-left: 0px; ">Hello,</div><div =
>> style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
>> margin-left: 0px; min-height: 14px; "><br></div><div style=3D"margin-top: =
>> 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">How can =
>> I forbid access to customer that force their IP to static ...</div><div =
>> style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
>> margin-left: 0px; ">Some customers change their windows property and =
>> force the IP as</div><div style=3D"margin-top: 0px; margin-right: 0px; =
>> margin-bottom: 0px; margin-left: 0px; ">be a static one ...</div><div =
>> style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
>> margin-left: 0px; min-height: 14px; "><br></div><div style=3D"margin-top: =
>> 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">I would =
>> like to prevent this ...<span =
>> class=3D"Apple-converted-space">=A0</span></div><div style=3D"margin-top: =
>> 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Does it =
>> exists a feature inside dhcpd to do this ?</div><div style=3D"margin-top: =
>> 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; =
>> min-height: 14px; "><br></div><div style=3D"margin-top: 0px; =
>> margin-right: 0px; margin-bottom: 0px; margin-left: 0px; =
>> ">Regards</div><div style=3D"margin-top: 0px; margin-right: 0px; =
>> margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div><div =
>> style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
>> margin-left: 0px; min-height: 14px; "><br></div><div style=3D"margin-top: =
>> 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; =
>> min-height: 14px; "><br></div> =
>> </blockquote></div><br></div></body></html>=
>>
>> --Apple-Mail-1--700833459--
>>
>>
>> -- Binary/unsupported file stripped by Ecartis --
>> -- Type: application/pkcs7-signature
>>
>>
>>
>>
>>
>>
>>   
>>     
>
>
>
>

More information about the dhcp-users mailing list