Re: bind 192.168.1.1 to all interfaces

2012-12-23 Thread jb
Eugen Konkov  yandex.ru> writes:

> ... 
> So in my vlan I have two DHCP servers. One is mine and
> second is on that router. Some users get wrong IPs from that router.
> ... 
> Or  s there any other method to prevent such ilegal DHCP servers on LAN?

http://www.tcpipguide.com/free/t_DHCPSecurityIssues.htm
jb


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: bind 192.168.1.1 to all interfaces

2012-12-23 Thread Eugen Konkov
Здравствуйте, Patrick.

Вы писали 23 декабря 2012 г., 15:17:43:

PL> Le Sun, 23 Dec 2012 14:17:47 +0200,
PL> Eugen Konkov  a écrit :

PL> Hello,

>> Or  s there any other method to prevent such ilegal DHCP servers on
>> LAN?

PL> At work we use "dhcp_probe"
PL> http://www.net.princeton.edu/software/dhcp_probe/

PL> It works quite fine, when someone plug a dhcp server it is detected and
PL> we shutdown the switch port.

PL> I don't know if it runs on FreeBSD, it runs on Centos 6.

PL> Regards.

Unfortunately we use unmanaged switches 


-- 
С уважением,
 Eugen  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: bind 192.168.1.1 to all interfaces

2012-12-23 Thread Patrick Lamaiziere
Le Sun, 23 Dec 2012 14:17:47 +0200,
Eugen Konkov  a écrit :

Hello,

> Or  s there any other method to prevent such ilegal DHCP servers on
> LAN?

At work we use "dhcp_probe"
http://www.net.princeton.edu/software/dhcp_probe/

It works quite fine, when someone plug a dhcp server it is detected and
we shutdown the switch port.

I don't know if it runs on FreeBSD, it runs on Centos 6.

Regards.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


bind 192.168.1.1 to all interfaces

2012-12-23 Thread Eugen Konkov
Hi, FreeBSD.

I have many vlans on server. IPs on those vlans are like 10.X.X.X/Y
I have run DHCP. But some times users on vlan can ON their soho router
like DIR-300 or so and connect their internet cable to LAN port of
that router. So in my vlan I have two DHCP servers. One is mine and
second is on that router. Some users get wrong IPs from that router.

Can I bind 192.168.1.1 address of router to server so restrict such
router to work normally?

Or  s there any other method to prevent such ilegal DHCP servers on LAN?

-- 
 Eugen  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"