*BSD News Article 86252


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!lucy.swin.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!spool.mu.edu!uwm.edu!newsfeeds.sol.net!newspump.sol.net!howland.erols.net!news.mathworks.com!news.kei.com!news.texas.net!uunet!in3.uu.net!199.60.19.15!news.island.net!nanaimo.island.net!cmott
From: Charles Mott <cmott@srv.net>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Ip's and ifconfig
Date: Tue, 7 Jan 1997 12:57:18 -0800
Organization: Island Internet Inc. - (604) 753-2383
Lines: 36
Message-ID: <Pine.LNX.3.95.970107121523.9029A-100000@nanaimo.island.net>
References: <32CCF094.41C67EA6@corpex.com> <5ak1kq$ge6@uriah.heep.sax.de> <5amee7$7qv@Symiserver2.symantec.com> <32cf8d7e.0@finesse.isdn.uni-konstanz.de>
NNTP-Posting-Host: nanaimo.island.net
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: cmott@nanaimo.island.net
In-Reply-To: <32cf8d7e.0@finesse.isdn.uni-konstanz.de>
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:33645

> tedm@agora.rdrop.com wrote:
> : In <5ak1kq$ge6@uriah.heep.sax.de>, j@uriah.heep.sax.de (J Wunsch) writes:
> : >Neil Fowler Wright <neil@corpex.com> wrote:
> : >
> : >> 	If we have several machines on our network (Ie sames class C
> : >> block from the same hub and router), all with the clients having
> : >> root priviledge.  How do we stop a client from allocating the ip
> : >> number of another clients machine, or for that matter any other IP
> : >> number in that Class C block.
> : >
> : >By hiring an administrator.
> : >
> 
> : This doesen't work, they still will do it!

Plan A

    Apply the full technological resources of the
    Network in a ruthless and unrelenting pursuit
    of the offenders. Ethernet hardware addresses
    can be backtracked through intelligent switches
    and hubs to a specific UTP wall port. Your team
    will then confront subversive elements, preferably
    late at night. The team should wear dark
    trenchcoats.

Plan B

    Establish simple procedures such that anyone
    who wants an IP address (and cannot or prefers
    not to use a DHCP server) can obtain one,
    preferably in a matter of minutes. Network
    administrators respect the personal diginity
    of users.