DHCP leases exhaustion attack?

[schilling]

Hi All,

We had a case that one MAC address obtained about 100 IP address from our
DHCP server in a short time period. We noticed that some DHCP requests come
with different Windows Netbios name. If the client manually send DHCP
request asking for different IP addresses, will ISC DHCPD just give to them
without checking the current lease file that the same MAC already has a
lease? Or will ISC DHCPD has a option to limit how many IP could be
associated with a MAC?

I saw Yersinia tool can send DHCP request, but I did not try it out yet.
Will that tool hack the DHCP server similar to our case?

Thanks.

Schilling
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20080912/00328831/attachment.html>