On 5/5/11 9:11 AM, Yehuda Katz wrote:
On Thu, May 5, 2011 at 11:56 AM, Karl Fife <[email protected]
<mailto:[email protected]>> wrote:
To prevent 'automatic' configuration of routers, pfSense DHCP can
be configured trivially to only issue DHCP leases to known hosts
(based on mac address), but naturally it wouldn't prevent someone
from manually configuring IP settings or mac spoofing.
I tried that...
Unless you can prevent physical connections to the network (including
physically locking any current connection and open port, and MAC
address filtering won't do it either) your users will always find a
way to connect.
- Yehuda
Discouragement will be enough in this case. I won't turn the DHCP
service on.
Mehma
