Edward Desroches wrote:
> A quick security-basics question. =)

[...]

> If anyone could give an answer relating to a Linux environment as well, 
> it would be helpful.

The usual technique is to configure dhcpd to ignore unknown MAC 
addresses, then explicitly create a bunch of host{} sections with all 
the MAC addresses on your network.

Of course, that does not stop someone from using a static IP to gain 
connectivity, provided he/she knew the specifics of your network (i.e. 
the subnet mask, nameserver, and gateway). But you should be watching 
the ARP cache on your gateway for MAC addresses that ain't yours.


-- 
Josh Glover <[EMAIL PROTECTED]>

Associate Systems Administrator
INCOGEN, Inc.

Reply via email to