[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    Re: DHCP through RAS
From:       jamesworld () intelligencia ! com
Date:       2004-03-03 2:25:18
Message-ID: 5.2.1.1.0.20040302201944.02a210f8 () ipostoffice ! worldnet ! att ! net
[Download RAW message or body]

That means that the machine dialing in has a modem and it's 
configured.  Your RAS identifies it as an interface that needs an IP 
address so it assigns one to it.  It detects it's a RAS (modem) interface 
so it gives that type.  Usually harmless, but it's a consideration when 
allocating DHCP pools.

Try it yourself.  Use a Win NT, 2K or XP box with a modem on it.  Configure 
the modem with Remote access and have the service enabled.  Plug in and get 
an IP address via DHCP.  Look at the leases for your machine and notice the 
two IP's and the interface types.  And you are not using your modem as an 
ICS or anything else.

Yes the possibility is there.  If you are running AD, create a script or GP 
to restrict it.  (Shut down the RRAS service)

-James


At 15:31 03/01/2004, Jason Humes wrote:
>Hi
>We provide access-controlled internet in a public area through the use of an
>access-controller.  Usernames for authentication to the AC are given out
>manually and IPs are distributed via W2K DHCP Server.  The problem is that
>we don't want users installing access-points or other access mechanisms onto
>the network and doing some second level sharing of the internet feed.  I
>mean, if I look at the DHCP server leases, most of the leases are plain old
>PCs, but there are a couple that show up as RAS under the "unique ID" field
>and the "Name" field matches that of another...this means that the person
>showing up as RAS is connecting THROUGH the matched Name...correct?  Is
>there any way in W2K DHCP to stop this?  The access-controller works by
>source IP address, and the IP would be the same for both PCs and therefore
>allowed through to the internet.  Thanks
>
>Jason D. Humes
>
>
>
>**********************************************************************
>
>Confidentiality Notice:
>
>The information contained in this e-mail and any attachments may be legally
>privileged and confidential. If you are not an intended recipient, you are
>hereby notified that any dissemination, distribution or copying of this
>e-mail and any attachments is strictly prohibited. If you received this
>e-mail in error, please notify the sender and permanently delete the e-mail
>and any attachments immediately. You should not retain, copy or use this
>e-mail or any attachment for any purpose, nor disclose all or any part of
>the contents to any other person.
>
>Thank you.
>
>
>---------------------------------------------------------------------------
>Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
>wireless security
>
>Protect your network against hackers, viruses, spam and other risks with
>Astaro Security Linux, the comprehensive security solution that combines six
>applications in one software solution for ease of use and lower total cost
>of ownership.
>
>Download your free trial at
>http://www.securityfocus.com/sponsor/Astaro_focus-ms_040301
>---------------------------------------------------------------------------


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, 
wireless security

Protect your network against hackers, viruses, spam and other risks with 
Astaro Security Linux, the comprehensive security solution that combines six 
applications in one software solution for ease of use and lower total cost 
of ownership. 

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_focus-ms_040301
---------------------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]