Or you can do what I do.... I use DHCP Reservations for every machine.
This way each machine has the same IP, but it is still retrieved from
the DHCP server.

Then deny access through the firewall from any other IPs and only let
through what you specifically want through.  Basic rule of firewalls:
Lock it down completely and then allow only what is necessary.

Chris Patterson
Network Administrator
Axiom Systems
Http://Www.AxiomSys.Com 
The Truth Is Out There. Go Find It. Http://Www.2600.Com


-----Original Message-----
From: Noonan, Wesley [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 12, 2002 2:41 PM
To: 'Nick'; [EMAIL PROTECTED]
Subject: RE: Restricting User from Changing IP


Build your environment so that there isn't a way around?? Seriously.

What OS are the users using? If they aren't administrators on Windows, I
don't think they can change their IP addresses. Sounds like it is time
to start revoking privileges...

Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
[EMAIL PROTECTED]
http://www.bmc.com


-----Original Message-----
From: Nick [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 12, 2002 13:32
To: [EMAIL PROTECTED]
Subject: Restricting User from Changing IP

I got some nasty users behind proxying / filtering server,.. sometimes
they change their ip address to get out from the restrictions.

What should  I  do to prevent this ? ( I use iptables )

TIA
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to