cwbe coordinatez:
101
63540
63542
2109677
63692
4592253

ABSOLUT
KYBERIA
permissions
you: r,
system: public
net: yes

neurons

stats|by_visit|by_K
source
tiamat
K|my_K|given_K
last
commanders
polls

total descendants::
total children::1
show[ 2 | 3] flat
cafte

Jeden komp u nas v kancli sa pravdepodobne infikoval virusom co instaluje rogue DHCP server snazim sa najst sposob ako nastavit nejaky preffered DHCP server/relay agent aby moj komp ignoroval DHCP offer z falosneho DHCP servera.

viete o nejakej moznosti ako by som limitoval DHCP discovery? pozeram dhclient.conf (ubuntu/deb) ale nenasiel som tam taku polozku a nedari sa mi to vygooglit.

Za akekolvek napady som vdacny.




00000101000635400006354202109677000636920459225304592330
ventYl
 ventYl      20.03.2009 - 11:27:59 , level: 1, UP   NEW
da sa nastavit dhcp server hostname, ktory sa pouziva prave na take pripady, ked mas v sieti viacero DHCP serverov. Pri nastroji dhcpcd sa to robi prepinacom -h. Treba vediet hostname daneho servera, ale predpokladam, ze ten hostname check sa robi na serveri a je mozne, ze virus s tym pokutnym DHCPckom bude vyjebany a hentoto si osetri.

0000010100063540000635420210967700063692045922530459233004592493
rigor
 rigor      20.03.2009 - 12:32:10 , level: 2, UP   NEW
dakujem za frisku odpoved, hoci mi priamo nepomohla pretoze nechapem ako mi pomoze ked specifikujem svoj hostname ked posielam dhcp discovery (ale to moze byt chyba na mojej strane), doviedla ma k dhclient -reject switchu ktory mi dovoluje ignorovat rogue DHCP srv.

000001010006354000063542021096770006369204592253045923300459249304592595
d14
 d14      20.03.2009 - 13:07:00 , level: 3, UP   NEW
ak mas manazovatelny switch, napr. cisco, vies to poriesit nasledovne:
The ip helper-address interface subcommand tells the router to forward UDP broadcasts, including BootP, received on this interface. (UDP is the connectionless alternative to TCP at the Transport Layer.) Use the ip helper-address interface subcommand to specify the destination address for forwarding broadcast packets. Full command syntax follows.
ip helper-address address
no ip helper-address address

000001010006354000063542021096770006369204592253045923300459249304592506
ventYl
 ventYl      20.03.2009 - 12:35:59 , level: 3, UP   NEW
specifikujes hostname DHCP servera, nie tvoj :)) neviem, ci to funguje tak, ze priamo v requeste je napisane, od ktoreho DHCP servera chces reply, alebo dhcpcd ignoruje vsetky ostatne reply a vybere si len ten, ktory zadas.

00000101000635400006354202109677000636920459225304592330045924930459250604592576
rigor
 rigor      20.03.2009 - 13:02:14 , level: 4, UP   NEW
to len mne ta formulacia pride divna ?
h, --hostname hostname
By default, dhcpcd will send the current hostname to the DHCP
server so it can register in DNS. You can use this option to
specify the hostname sent, or an empty string to stop any
hostname from being sent.

0000010100063540000635420210967700063692045922530459233004592493045925060459257604592968
smok
 smok      20.03.2009 - 15:14:23 , level: 5, UP   NEW
ej niekto asi necita dobre manual, alebo je to fakt len zla formulacia :)