I have continuously problems to get a mail through to the list, but I'll give it a try. So you are lucky if you can read this. I have also sent this already to the original poster.

I wrote a tool for it:

http://blog.assarbad.info/20060814/mackerer_en/ (English article)
http://blog.assarbad.info/20060811/mackerer/ (German article)

The new version (i.e. C++-version) is not yet ready, but I am working on it. Until then you would have to use this one:
http://assarbad.info/stuff/MACkerer2.rar

It works perfectly well in our environment. Of course MAC spoofing is still possible, but this would cause other problems, too.

If you need any further help with the usage of the tool, ask back.

Since I did not cover this topic in my blog: of course you can also use MACkerer2 to limit the machines to get an IP from your DHCP server even though you have enough IPs available to cater everyone an IP simultaneously. I'll probably write another blog entry today or so, to cover this method as well. While there are CLI utilities to configure the DHCP server, I personally like the text configuration files much more ;)

Regards,

Oliver

PS: It is OpenSource (under BSD license), so there shouldn't be any security concerns ;)
And it is written in C, so anyone here can have a look at it and check that it doesn't do anything it is not supposed to.
PPS: If someone wants to join in (with development), please consider contacting me, we could open a new project on SF.net to allow for distributed development ...
--
---------------------------------------------------
May the source be with you, stranger ;)

ICQ: #281645
URL: http://assarbad.net | http://assarbad.info | http://blog.assarbad.info

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]