Implementing anti-abuse techniques on ISP networks....
Christopher Masto
chris at netmonger.net
Thu Aug 7 21:09:42 UTC 1997
On Thu, Aug 07, 1997 at 12:22:28PM -0700, Michael Dillon wrote:
> >For those scoring along at home, it's not easily possible with the
> >RADIUS-based method I suggested, as the RADIUS server doesn't know
> >the dynamic IP that will be assigned until it has already accepted
> >the login. Oh well.
>
> Which RADIUS server are you referring to, there are many.
None in particular. I was referring to RADIUS the protocol.
> RADIUS servers can be hacked to do anything you like and a couple of years
> ago I remember that at least one person had hacked there server to issue
> static IP addresses from a dynamic pool managed by the RADIUS server rather
> than allowing the terminal server to manage its own pool of addresses. This
> sort of hack could be used in conjunction with special filter rules to
> accomplish what you seek.
Defeating the terminal server's pool management, yes. I though it was
obvious that I was referring to allowing the addresses to be assigned
by the term servers. In any case, this has indeed exhausted its
operational interest.
--
= Christopher Masto = chris at netmonger.net = http://www.netmonger.net/ =
= NetMonger Communications = finger for PGP key = $19.95/mo unlimited access =
= Director of Operations = (516) 221-6664 = mailto:info at netmonger.net =
v---(cut here)---v
--
yourname at some.dumb.host.com
"Keep in mind that anything Kibo says makes a great sig." -- Kibo
^---(cut here)---^
More information about the NANOG
mailing list