How can I forbid access to customer that force their IP to static ...

braaen at zcorum.com braaen at zcorum.com
Sat Jul 7 02:47:11 UTC 2007


OpenBSD (www.openbsd.org) has a function that updates the firewall on dhcp 
leases.  I think you can also set it to do other actions, possibly even 
sending snmp strings to a switch to turn off a switch port or something like 
that.  If the OS you are using doesn't have a feature like this you may be 
able to get some ideas from the source code.  Hope that helps
Brian 

On Friday 06 July 2007 20:13, Sébastien CRAMATTE wrote:
> seems that  deny client-updates is related only dynamic dns updates ...
> I  don't search for this ...
> 
> I mean that our users sometines open their windows network properties
> and cut/paste from  a simple "C:\>ipconfig /all"  output
> ...
> 
> 
> 
> Migneron Richard escribió:
> > Content-Type: multipart/alternative;
> > 	boundary=Apple-Mail-1--700833459
> >
> > --Apple-Mail-1--700833459
> > Content-Transfer-Encoding: quoted-printable
> > Content-Type: text/plain;
> > 	charset=WINDOWS-1252;
> > 	delsp=yes;
> > 	format=flowed
> >
> > I think you want :  deny client-updates;  (or ignore) !
> >
> > There's lot more right in the man page !  Either   dhcpd.conf  or  
> > dhcp-options   you'll manage to read then about 20 times until you  
> > have your configuration setup completely !
> >
> > Cheers,
> >
> > Richard
> > _______________________________________________
> > Richard Migneron
> > @ : richard at migneron.com
> > Tél. : +33.(0)1.45.45.13.92 - Fbox: +33.(0)9.50.70.23.92 - Fax: +33. > >
> > (0)9.55.70.23.92
> > Yahoo Messenger ID: rmigneron
> > PGP Fingerprint : EFFE 44E3 894A 7051 F86E E532 4880 9534 E1FB DB33
> > "J’vous ai déjà dit que je prêtais du pognon à des taux > > vraiment pas  
> > dégueulasses ?",
> > Venec, Kaamelott, Livre II, Plus près de Toi
> >
> >
> > On 7 juil. 07, at 00:44, Sébastien CRAMATTE wrote:
> >
> >   
> >> Hello,
> >>
> >> How can I forbid access to customer that force their IP to static ...
> >> Some customers change their windows property and force the IP as
> >> be a static one ...
> >>
> >> I would like to prevent this ...
> >> Does it exists a feature inside dhcpd to do this ?
> >>
> >> Regards
> >>
> >>
> >>
> >>     
> >
> >
> > --Apple-Mail-1--700833459
> > Content-Transfer-Encoding: quoted-printable
> > Content-Type: text/html;
> > 	charset=WINDOWS-1252
> >
> > <html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; > > -webkit-line-break: after-white-space; ">I think you want :  deny > > client-updates;  (or ignore) !<div><br > > class="webkit-block-placeholder"></div><div>There's lot more right in > > the man page !  Either   dhcpd.conf  or dhcp-options   you'll > > manage to read then about 20 times until you have your configuration > > setup completely !</div><div><br > > class="webkit-block-placeholder"></div><div>Cheers,</div><div><br > > class="webkit-block-placeholder"></div><div>Richard<br><div> <span > > class="Apple-style-span" style="border-collapse: separate; > > border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Comic Sans > > MS; font-size: 11px; font-style: normal; font-variant: normal; > > font-weight: normal; letter-spacing: normal; line-height: normal; > > text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: > > 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; > > white-space: normal; widows: 2; word-spacing: 0px; "><span > > class="Apple-style-span" style="border-collapse: separate; > > border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Comic Sans > > MS; font-size: 11px; font-style: normal; font-variant: normal; > > font-weight: normal; letter-spacing: normal; line-height: normal; > > text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: > > 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; > > white-space: normal; widows: 2; word-spacing: 0px; "><span > > class="Apple-style-span" style="border-collapse: separate; > > border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Comic Sans > > MS; font-size: 11px; font-style: normal; font-variant: normal; > > font-weight: normal; letter-spacing: normal; line-height: normal; > > text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: > > 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; > > white-space: normal; widows: 2; word-spacing: 0px; "><div style="; > > font-family: Helvetica; font-size: 12px; "><span > > class="Apple-style-span" style="font-family: Helvetica; font-size: > > 12px; "><font class="Apple-style-span" face="Comic Sans MS" > > size="3"><span class="Apple-style-span" style="font-size: > > 
11px;">_______________________________________________</span></font></span> >   
> >> </div><div style="">Richard Migneron</div><div style="">@ : <a > >>     
> > href="mailto:richard at migneron.com">richard at migneron.com</a></div><div > > style="">Tél. : +33.(0)1.45.45.13.92 - Fbox: +33.(0)9.50.70.23.92 > > - Fax: +33.(0)9.55.70.23.92</div><div style="">Yahoo Messenger ID: > > rmigneron</div><div style="">PGP Fingerprint : EFFE 44E3 894A 7051 > > F86E E532 4880 9534 E1FB DB33</div><div style="">"J’vous ai déjà > > dit que je prêtais du pognon à des taux vraiment pas dégueulasses > > ?",</div><div style="">Venec, Kaamelott, Livre II, Plus près de > > Toi</div><br class="Apple-interchange-newline"></span></span></span> > > </div><br><div><div>On 7 juil. 07, at 00:44, Sébastien CRAMATTE > > wrote:</div><br class="Apple-interchange-newline"><blockquote > > type="cite"><div style="margin-top: 0px; margin-right: 0px; > > margin-bottom: 0px; margin-left: 0px; ">Hello,</div><div > > style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; > > margin-left: 0px; min-height: 14px; "><br></div><div style="margin-top: 
> > 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">How can > > I forbid access to customer that force their IP to static ...</div><div > > style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; > > margin-left: 0px; ">Some customers change their windows property and > > force the IP as</div><div style="margin-top: 0px; margin-right: 0px; > > margin-bottom: 0px; margin-left: 0px; ">be a static one ...</div><div > > style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; > > margin-left: 0px; min-height: 14px; "><br></div><div style="margin-top: 
> > 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">I would > > like to prevent this ...<span > > class="Apple-converted-space"> </span></div><div style="margin-top: 
> > 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Does it > > exists a feature inside dhcpd to do this ?</div><div style="margin-top: 
> > 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; > > min-height: 14px; "><br></div><div style="margin-top: 0px; > > margin-right: 0px; margin-bottom: 0px; margin-left: 0px; > > ">Regards</div><div style="margin-top: 0px; margin-right: 0px; > > margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div><div > > style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; > > margin-left: 0px; min-height: 14px; "><br></div><div style="margin-top: 
> > 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; > > min-height: 14px; "><br></div> > > </blockquote></div><br></div></body></html>> >
> > --Apple-Mail-1--700833459--
> >
> >
> > -- Binary/unsupported file stripped by Ecartis --
> > -- Type: application/pkcs7-signature
> >
> >
> >
> >
> >
> >
> >   
> 
> 
> 
> 



More information about the dhcp-users mailing list