[Asterisk-Users] Re: Asterisk Box as a Router, Firewall and DHCP Server

[steve szmidt]

On Thursday 02 June 2005 03:14, Tony Mountifield wrote:
> I find DHCP on my LAN extremely useful for both my and visiting laptops.
> Any machine that will be using my LAN regularly gets a static entry in
> /etc/dhcpd.conf so it will always get the same IP address. It also gets
> an entry in my local DNS.
>
> That would address Steve's concerns regarding traceability.

Nope, different issue. The reason not to have random IP addresses assigned to 
computers on a LAN, which you manage, is so that you can eliminate a source 
of confusion. It gives a point of stability when the same computer keeps the 
same IP. You soon get familiar with who's doing what, and so new or odd 
behavior is easier to recognize. 

As far as tracing goes you can always look in the dhcp server log and see who 
had what IP at what time. Which is a total pain, if you notice something 
going on and you want to quickly see who is involved.

Granted it's much nicer to not have to configure any computers. So it comes 
down to a balance, which is exactly what security is all about. Balancing 
risks.

-- 

Steve Szmidt

"They that would give up essential liberty for temporary safety 
deserve neither liberty nor safety."
                                Benjamin Franklin