![](https://seccdn.libravatar.org/avatar/17b55235717308d3563c2aff42e6af11.jpg?s=120&d=mm&r=g)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hail List! A long time ago i have set a relation between ip and mac address using arp command on a SuSE 8.0 (this is not important ... i think)...like this arp -f /path_to_arp_file and have arpwartch started on that interface. this was done to prevent users for changing their ip! my question is: how can i stop them from changing ip in other way ... because now they change both ip and mac address ...(not realy change mac address-but make network card driver to "report" another mac -- this can be done also with ifconfig in linux)! Many thanx in advance! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj9EzS0ACgkQPynneORQaDFW5QCfckHfJEnsdTByRcCvs2Oyc9fE i3UAni9m1r0c7jmLj7hIr6By6Ngjx0Fz =Ox6e -----END PGP SIGNATURE-----
![](https://seccdn.libravatar.org/avatar/3d65ce348306eb0e36a6ec890e3e1b2d.jpg?s=120&d=mm&r=g)
On Thursday 21 August 2003 14:46, Adrian Costescu wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hail List! A long time ago i have set a relation between ip and mac address using arp command on a SuSE 8.0 (this is not important ... i think)...like this arp -f /path_to_arp_file and have arpwartch started on that interface. this was done to prevent users for changing their ip! my question is: how can i stop them from changing ip in other way ... because now they change both ip and mac address ...(not realy change mac address-but make network card driver to "report" another mac -- this can be done also with ifconfig in linux)!
Shouldn't they be prevented from accessing the majority of ifconfig functions as users? I can only get this kind of access as root ... fergus@> /sbin/ifconfig eth0 down SIOCSIFFLAGS: Permission denied Sorry if this is a stupid answer - I am used to the luxury of being the only 'real' user on the machine.
Many thanx in advance!
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org
iEYEARECAAYFAj9EzS0ACgkQPynneORQaDFW5QCfckHfJEnsdTByRcCvs2Oyc9fE i3UAni9m1r0c7jmLj7hIr6By6Ngjx0Fz =Ox6e -----END PGP SIGNATURE-----
-- Fergus Wilde Chetham's Library Long Millgate Manchester M3 1SB Tel: +44 161 834 7961 Fax: +44 161 839 5797 http://www.chethams.org.uk
![](https://seccdn.libravatar.org/avatar/17b55235717308d3563c2aff42e6af11.jpg?s=120&d=mm&r=g)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday 21 August 2003 17:18, Fergus Wilde wrote: i put my question wrong when i said users! i meant clients! sorry...
On Thursday 21 August 2003 14:46, Adrian Costescu wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hail List! A long time ago i have set a relation between ip and mac address using arp command on a SuSE 8.0 (this is not important ... i think)...like this arp -f /path_to_arp_file and have arpwartch started on that interface. this was done to prevent users for changing their ip! my question is: how can i stop them from changing ip in other way ... because now they change both ip and mac address ...(not realy change mac address-but make network card driver to "report" another mac -- this can be done also with ifconfig in linux)!
Shouldn't they be prevented from accessing the majority of ifconfig functions as users? I can only get this kind of access as root ...
fergus@> /sbin/ifconfig eth0 down SIOCSIFFLAGS: Permission denied
Sorry if this is a stupid answer - I am used to the luxury of being the only 'real' user on the machine.
Many thanx in advance!
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org
iEYEARECAAYFAj9EzS0ACgkQPynneORQaDFW5QCfckHfJEnsdTByRcCvs2Oyc9fE i3UAni9m1r0c7jmLj7hIr6By6Ngjx0Fz =Ox6e -----END PGP SIGNATURE-----
- -- ing. Adrian Costescu Administrator Retea Infoplus, Ramnicu Valcea http://www.infoplus.com.ro -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj9FA8UACgkQPynneORQaDH7qACcDOnMiGnqMuJBsNcZuBfKPtiM W6oAniU9L4axHOFgcfDSAcAJ2tiUG/PS =U2JB -----END PGP SIGNATURE-----
participants (2)
-
Adrian Costescu
-
Fergus Wilde