Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Down with DHCP!!!! |
|---|---|
| Date: | Sat, 25 Feb 2006 11:16:48 -0600 |
Andreas Hell dijo [Wed, Feb 22, 2006 at 08:11:06AM +0100]:
Just a 2p thought:My suggestion would be to use DHCP with MAC-based reservations.Isn't it right that any wannebe hacksor can easily spoof his/her mac-address to let it look like an "authorised" one? And wouldn't this mean that the only barrier to get an IP is to choose/find a correct mac-address, which might be done by sniffing the network or something alike? If so, giving away Ips based on mac-addresses doesn't look too secure to me, does it?
Exactly. Using DHCP this way helps you with administration, but is not a security measure. It just gets you a little bit better security than not having DHCP and thus no real control on who has which address. -- Gunnar Wolf - gwolf@gwolf.org - (+52-55)5623-0154 / 1451-2244 PGP key 1024D/8BB527AF 2001-10-23 Fingerprint: 0C79 D2D1 2C4E 9CE4 5973 F800 D80E F35A 8BB5 27AF --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | AD Aware Firewall/Proxy device, Steveb |
|---|---|
| Next by Date: | pHproxy, edited version for more obfuscation, Anton Chekhov |
| Previous by Thread: | Re: Down with DHCP!!!!, Andreas Hell |
| Next by Thread: | Re: Down with DHCP!!!!, Manuel Sousa |
| Indexes: | [Date] [Thread] [Top] [All Lists] |