Re: Prevent stealing IP numbers

From: NeoSadist (neosad1st_at_charter.net)
Date: 02/28/04 

Date: Fri, 27 Feb 2004 22:40:56 -0700

Sensei wrote:

> Hi.
>
> We're looking for a solution for preventing ip stealing. Students in our
> department usually connect their laptops and use one ip number... you
> can just imagine the conflicts we have...
>
> Is there a way of using some sort of authentication? I mean, we'll use a
> kerberos server, so we have a strong authentication server. Is this a
> good way? And how to use kerberos in such a way so that students must
> authenticate and gain tickets to use the network?

Find their host name and scan them. This requires monitoring your network.
That, and if you find out, take away their priveleges for a week, or find
some way to punish them. Alternately, you could figure out a way to put a
special token or something on your own machines that would prevent them
from logging in, or by using MAC address filtering. Keep logs. That, and
try to figure out how to tell what port and where they are logging in.
If you have to, lock the switching stations up.
But find a way.
That, and/or find a college where the administration will enforce the
policies you set up. 

-- 
Rules:
        (1)  The boss is always right.
        (2)  When the boss is wrong, refer to rule 1.

Relevant Pages