OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archives: RE: Bogus DHCP server in the network....

RE: Bogus DHCP server in the network....


sean.kellylanston.com
Tue, 5 Oct 1999 09:39:16 -0400


> From: TUDOR PANAITESCU [mailto:tpanaitescuusa.net]
>
> Here's the picture. I am a client of Adelphia PowerLink
> CableTV. They use DHCP for giving IP addresses.
...
> I believe it is a UNIX box, most likely
> LINUX with NAT. Now here comes the question: is anything
> there we can do to block this guy ?

The first thing that comes to mind, and probably the best solution, would be
to send mail to your isp -- the abuse address. Include everything you know
about the person (MAC address, IP, etc). If you can, include testimonials
from other users and specify how long it's been going on. If one of their
customers is screwing up access for other customers then he is either
ignorant and should be told to correct the problem, or he is malicious and
he should either be warned or have his service terminated. Hacking his
machine is not a good solution -- then he can report YOU and if he is a
hacker then it will also anger him and you don't want to be any more of his
target than you are.

Sean



This archive was generated by hypermail 2.0b3 on Tue Oct 05 1999 - 18:24:43 CDT