[Asterisk-Users] Re: Asterisk Box as a Router, Firewall and DHCP Server

[Dave Cotton]

On Thu, 2005-06-02 at 10:07 -0400, steve szmidt wrote:
> On Thursday 02 June 2005 03:14, Tony Mountifield wrote:
> > I find DHCP on my LAN extremely useful for both my and visiting laptops.
> > Any machine that will be using my LAN regularly gets a static entry in
> > /etc/dhcpd.conf so it will always get the same IP address. It also gets
> > an entry in my local DNS.
> >
> > That would address Steve's concerns regarding traceability.
> 
> Nope, different issue. The reason not to have random IP addresses assigned to 
> computers on a LAN, which you manage, is so that you can eliminate a source 
> of confusion. It gives a point of stability when the same computer keeps the 
> same IP. You soon get familiar with who's doing what, and so new or odd 
> behavior is easier to recognize. 
> 
> As far as tracing goes you can always look in the dhcp server log and see who 
> had what IP at what time. Which is a total pain, if you notice something 
> going on and you want to quickly see who is involved.
> 
> Granted it's much nicer to not have to configure any computers. So it comes 
> down to a balance, which is exactly what security is all about. Balancing 
> risks.

What's wrong with :-

   host W2K {
        hardware ethernet       00:30:1B:AC:39:E3;
        fixed-address           192.168.1.130;
        }

this box always gets the same IP and I know who's got what.


-- 
Dave Cotton <dcotton at linuxautrement.com>