I prefer static IP addresses for stationary computer and dynamic IPs for portable systems. I'm running a Fedora 8 network and find static IP addresses helpful for:
1) In order to allow a desktop computer to mount an NFS share on the server, the desktop computer must be authorized by IP address on the server, before the server will allow the Desktop computer to mount the specified share. 2) I use a Linksys wireless-G router with switches, which act as the primary firewall between the internet and the LAN. Specified ports of inbound traffic are forwarded to the LAN using static IP addresses. 3) The mail server only relays certain LAN IP addresses. 4) The mail log can be used to trace back to particular computers via IP addresses in the log files. This would make it easy to identify anyone abusing the mail system like spammers. 5) By default all access to the servers is denied using the hosts.deny file. Only computers that need access to the serviers for ssh are granted permission via the hosts.allow files. This prevents anyone from using discovery software over the internet and finding my SSH port from attempting to gain access to my servers by using password cracking software. 6) Computers are granted access to my PostgreSQL DBMS via static IP addresses. 7) I run a small LAN all under one subnet mask and the LAN does not change very often, so using static IP addresses is not too big of a management headache. If I were running a larger LAN or tasked with managing customers LANs, I might put a greater emphasis on assigning IP address using DHCP. 8) Regardless of network size a static IP address is necessary for anyone need a really secure system. Regards, LelandJ Paul McNett wrote: > Rick Borup wrote: > >> Paul McNett wrote: >> >>> There's *never* a good reason for static ip's on a workstation, desktop, >>> or laptop. >>> >> Unless you need to do port forwarding from the router to a specific machine, >> e.g. for pcAnywhere or FTP access. >> > > See my qualification: static ip's are okay, as long as it is the dhcp > server handling it, not the workstation. > > Paul > > [excessive quoting removed by server] _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/[EMAIL PROTECTED] ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
