While I realize DHCPd isn't a security program of any kind, this
does have to do with it. So I just switched our entire network over to
DHCP assigned IPs in preparation for another project. But in doing
that, I've come to realize that anyone could plug in their machine and
manually set their IP address and by-pass the DHCP discovery all
together. And thus also gaining access to our internal network,
something we might not necassarily want to allow. So the question now
is, is there some way to restrict traffic to only those assigned IPs
(through DHCP) and block anything else that happens to show up on the
network? Maybe through iptables somehow?
-- A
--
W | It's not a bug - it's an undocumented feature.
+--------------------------------------------------------------------
Ashley M. Kirchner <mailto:ashley@xxxxxxxxxx> . 303.442.6410 x130
IT Director / SysAdmin / Websmith . 800.441.3873 x130
Photo Craft Imaging . 3550 Arapahoe Ave. #6
http://www.pcraft.com ..... . . . Boulder, CO 80303, U.S.A.