LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-05-2003, 09:22 AM   #1
hitesh_linux
Member
 
Registered: Dec 2001
Location: /root
Distribution: FreeBSD,NETBSD,redhat
Posts: 472

Rep: Reputation: 30
Lightbulb Miss Match IP Add and Adapter Add. ????


Hello Friends,

I have one Scenario,which i put here,

We have runing ISP.we maintain near about 350 client.
and we have software like every client should have login page to access our net.
so every client should login before they used net.

now i face some problem here,

we have ip rang like 10.0.9.10 to 10.0.9.255

we store all user IP add and Adapter add(like Lan card H/W numbar)
in our database.and all r uniq.

now here spposed their one client called ABC
and his Pc's IP Add something like 10.0.9.50
and Adapter add is:00-00-20-d3-90-b5

and their more client call XYZ
and his IP add like :10.0.9.60
and Adapter add is :00:C1:26:05A:BC

when I give ABC's IP Add(10.0.9.50) (with out Adapter number)in XYZ PC's,after
reboot when i access net it's working ,
How it can be possible,
and it's didn't give any error messages. on XYZ's Pc.like "Invalide MAC Add"

Quest is:
!)how can sove this problem
2)is there any error in Scripting.?
3)or is there any Security Required in RHL Server

or i can't guess other problem,
so any one have any adia abt this.

I affriad how many users doing this.or using any one else IP(with out mac add) to access net.
so tell how can find rest of it also.

Help me.....

Hitesh
 
Old 02-05-2003, 04:23 PM   #2
dorian33
Member
 
Registered: Jan 2003
Location: Poland, Warsaw
Distribution: LFS, Gentoo
Posts: 591

Rep: Reputation: 32
Re: Miss Match IP Add and Adapter Add. ????

Quote:
we store all user IP add and Adapter add(like Lan card H/W numbar)
in our database
explain what for is this base (where it is used)?

the simplest way o force mac-ip correlation is to use netfilter (iptables) with mac & ip switches
 
Old 02-06-2003, 02:59 AM   #3
hitesh_linux
Member
 
Registered: Dec 2001
Location: /root
Distribution: FreeBSD,NETBSD,redhat
Posts: 472

Original Poster
Rep: Reputation: 30
Arrow how to secure ip and mac add !!

Hi ,

As i had metion here we runing ISP, so we provide "internet connection" to our users. for that any new user's get connection ,we configuar one ip and mac add on users PC. and also store in our database. but when i give the same ip(only ip) to another users pc it's not asking mac add.???

and we are doing this for our secuirty perpsers.
"bec'z no one users can used other users ip with mac add."

is their any other sloution to secure this.
if it then let me know !!!

Hitesh

Last edited by hitesh_linux; 02-06-2003 at 03:01 AM.
 
Old 02-06-2003, 01:01 PM   #4
dorian33
Member
 
Registered: Jan 2003
Location: Poland, Warsaw
Distribution: LFS, Gentoo
Posts: 591

Rep: Reputation: 32
Re: how to secure ip and mac add !!

Quote:
we configuar one ip and mac add on users PC
what does it mean? I understand that 'configure' means assign the ip to the user PC via dhcp or statically at user's PC. Is it correct?
Quote:
and also store in our database
but what is this base? your own one? explain it. i do not see the reasons what for is this base and why ip change should result asking for the new mac address (which program should do that?)
Quote:
but when i give the same ip(only ip) to another users
what does mean "i give"? in what way do you "give" the ip? (dhcp?)

I wrote the simple solution: use iptables filters. You can drop all the packet from the computer when ip and mac address doesn't match
 
Old 02-08-2003, 11:57 AM   #5
hitesh_linux
Member
 
Registered: Dec 2001
Location: /root
Distribution: FreeBSD,NETBSD,redhat
Posts: 472

Original Poster
Rep: Reputation: 30
Post Re: IP and Mac

HI,

here all Answer's:

1)we configuar one ip and mac add on users PC

----> means we assign an Ip and Mac add(Statically) for accessing Internet.this all ip and mac are uniq for all users.

2)and also store in our database
-----> Means We had created on Database In "Mysql" to store all users ip and mac.

and we have one software ,which check who's used net or who's off line. and wether any one try to used other's IP or not, for that Security we match users Ip and Mac add in out database.

if it's not configure or we didn't do that ,then any one used other's ip and try to access internet.

3)but when i give the same ip(only ip) to another users
-----> that's what i explained above,if i assign one users ip to other's users PC,with out assign(in other's users Pc)Mac add,
it's still working (access net).
i don't what to do !!

i hope ,now i had clear ur Quest !!,and now u can able to suggest some good sloution.

Thanx

Hitesh
 
Old 02-08-2003, 01:34 PM   #6
Darin
Senior Member
 
Registered: Jan 2003
Location: Portland, OR USA
Distribution: Slackware, SLAX, Gentoo, RH/Fedora
Posts: 1,024

Rep: Reputation: 45
So it's sort of like an ISP or a college where each user registers with you their MAC and you assign an IP to it.

Have you looked into turning off ARP and using only a static ARP table? That way even if someone "spoofs" an IP, if they did it with the wrong network card the replies would go to the owner's net card instead so the spoofer wouldn't see a thing. Now I have never implimented a static ARP table so I couldn't tell you how to do it but that sounds like a solution for your setup.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to add USB Wireless Adapter on Mandrake BritishEnigma Linux - Hardware 0 12-16-2004 05:11 AM
add CD-ROM? add Floppy? Devices? Kelphyr Slackware 5 10-10-2004 06:17 PM
Need to add network adapter... sumguy231 Linux - Hardware 2 04-12-2004 08:04 PM
kdevelop add folder and add new class is slow edwardt Programming 0 03-03-2004 06:04 PM
Cant add MySQL through add/remove programs Hero Doug Fedora 6 01-03-2004 10:35 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration