Anonymous | Login | 2024-11-11 09:06 EST |
Main | My View | View Issues | Change Log | Roadmap |
View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | Project | Category | View Status | Date Submitted | Last Update | |||
0001151 | PacketFence | dhcp | public | 2011-01-12 13:33 | 2011-12-30 23:38 | |||
Reporter | obilodeau | |||||||
Assigned To | obilodeau | |||||||
Priority | normal | Severity | feature | Reproducibility | N/A | |||
Status | closed | Resolution | fixed | |||||
Platform | OS | OS Version | ||||||
Product Version | ||||||||
Target Version | 3.1.0 | Fixed in Version | 3.1.0 | |||||
Summary | 0001151: Rogue DHCP detection with IP Helpers | |||||||
Description | Current rogue DHCP detection relies on analysis of the DHCP server-initiated packets. In an IP Helper setup we never get these packets. After reading RFC 2131, I realize that we could detect rogue DHCP servers in this context. "The client broadcasts a DHCPREQUEST message that MUST include the 'server identifier' option to indicate which server it has selected, and that MAY include other options specifying desired configuration values." If the server identifier is not an allowed DHCP server, report as rogue. | |||||||
Tags | No tags attached. | |||||||
fixed in git revision | ||||||||
fixed in mtn revision | 6c01f73ad854eeb91e96ccefbf08dc29a2f8f675 | |||||||
Attached Files | ||||||||
Notes | |
(0002465) obilodeau (reporter) 2011-11-25 14:27 |
Feature added in revno: 11cda3dfd55678189c879365e26e31d63cf326a1 Right now though if the IP of the rogue DHCP is not known to packetfence, we can do nothing about it except report it. I'll be experimenting with option 82 to see if we can do better in that regard. |
(0002466) obilodeau (reporter) 2011-11-28 13:26 |
Option 82 didn't help (at least on the 3550). Every bits are committed as of revno: 6c01f73ad854eeb91e96ccefbf08dc29a2f8f675 |
(0002500) obilodeau (reporter) 2011-12-30 23:37 |
Released in version 3.1.0. |
Issue History | |||
Date Modified | Username | Field | Change |
2011-01-12 13:33 | obilodeau | New Issue | |
2011-03-03 15:16 | obilodeau | Target Version | 2.1.0 => +1 |
2011-03-03 15:18 | obilodeau | Target Version | +1 => +2 |
2011-11-22 12:13 | obilodeau | Status | new => assigned |
2011-11-22 12:13 | obilodeau | Assigned To | => obilodeau |
2011-11-25 14:27 | obilodeau | Note Added: 0002465 | |
2011-11-28 13:26 | obilodeau | mtn revision | => 6c01f73ad854eeb91e96ccefbf08dc29a2f8f675 |
2011-11-28 13:26 | obilodeau | Note Added: 0002466 | |
2011-11-28 13:26 | obilodeau | Status | assigned => resolved |
2011-11-28 13:26 | obilodeau | Fixed in Version | => trunk |
2011-11-28 13:26 | obilodeau | Resolution | open => fixed |
2011-12-30 23:28 | obilodeau | Fixed in Version | trunk => 3.1.0 |
2011-12-30 23:37 | obilodeau | Note Added: 0002500 | |
2011-12-30 23:37 | obilodeau | Status | resolved => closed |
2011-12-30 23:38 | obilodeau | Target Version | +2 => 3.1.0 |
Copyright © 2000 - 2012 MantisBT Group |