RE: Down with DHCP!!!!

Totally agree, I could not imagine running any network with more than 10
machines without DHCP. It's one of the protocols that actually make life
easier for sys admins, and when setup correctly you can know exactly who had
the lease at any given time.

Regards,
Mitch Pope

-----Original Message-----
From: Brian Loe [mailto:knobdy@xxxxxxxxx]
Sent: Wednesday, 22 February 2006 12:45 AM
Cc: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: Down with DHCP!!!!

I would make jokes about your last comment, but I'm too weirded out by
this whole thread to even try. The company I work for, which is hardly
at the forefront of security, can tell you when a new machine is added
to the network, the instant it is added. Very soon, we'll be
implementing port security on all of our switches and a centralized
log server to gather data from every device on our network.

Your reasons for wanting to dump DHCP are as flawed as the original
poster's reasoning. Right now I can log into a FREE piece of software
I have implemented here and tell you what MAC address had which IP
address - for any period of time going back 2 weeks (and I could
configure it to keep the records longer). Eventually everything will
be getting logged in such a way that I'll be able to tell you when an
"incident" occured, on what network, via which MAC address on which
port of which switch...etc. I will be doing all of this with freely
available, open source code that you could download and install right
now...if you were in a position to do so.


On 18 Feb 2006 16:01:57 -0000, Y0@xxxxxxx <Y0@xxxxxxx> wrote:
I, too, would like to do away with DHCP. Not only for the reasons you have
outlined, but also because it is easier to track incidents back to a
specific host, without worrying about whether or not the lease has expired.

Unfortunately, I am not in a position to mandate that change.


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,

Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: stick a laptop to a LAN
    ... network, the traffic that you would not be able to encrypt, ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • RE: Windows Log
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • FW: PC Anywhere and security
    ... accessing the network any differently then a locally logged in user. ... Tailor your education to your own professional goals with degree ... Planning, Computer Emergency Response Teams, and Digital Investigations. ... The Norwich University program offers unparalleled Infosec management ...
    (Security-Basics)
  • RE: Re: University Degree or CISSP
    ... Subject: Re: Re: University Degree or CISSP ... > And a college education will benefit you until the day you die. ... >> Planning, Computer Emergency Response Teams, and Digital Investigations. ... >> The Norwich University program offers unparalleled Infosec management ...
    (Security-Basics)
  • Re: Securing Blackberries
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > Tailor your education to your own professional goals with degree ... > Computer Emergency Response Teams, ...
    (Security-Basics)