Re: DHCP

["Tim Clewlow" <tim () clewlow org>]

> You can also look at something like packetfence (packetfence.org).
>
> Its an open source NAC that can do DHCP fingerprinting and deny a
> client from getting an IP based on the fact that it is not a
> supported
> OS.

And a determined intruder can do OS spoofing - please stop trying to
make DHCP into a security system - you will be creating a false
sense of security. Use a protocol that is meant to provide security
- like IPsec.

Cheers, Tim.

-- 
The code that never executes at all is the fastest.


------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain 
a laser like insight into what is covered on the exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------