[clug] Pop quiz.. (DHCP and servers).
Alex Satrapa
grail at goldweb.com.au
Tue Jan 13 21:55:28 GMT 2009
On 13/01/2009, at 21:38 , Andrew Janke wrote:
> Should you or shouldn't you let your servers/desktops get their IP
> address via DHCP?
DHCP allows machines to gain an IP address that shouldn't be on the
network. If your DHCP configuration is a bunch of MAC addresses mapped
to IP addresses, with no dynamic allocation range, then you're
actually doing centrally controlled IP address allocation anyway, may
as well cut out the DHCP server and just lock down the configuration.
But that's just me being a control freak.
The main issue for me is that in a work environment, I may be in the
situation of having to provide evidence in court that certain
activities took place from a certain workstation at a specific time.
I'm also a fan of setting up command aliases in sudo and avoiding
"@admin ALL=(ALL) ALL". If someone wants to do something bad, they'll
"sudo -s" one day, start doing nasty stuff the next. You're better off
preventing them doing nasty stuff in the first place.
Alex
More information about the linux
mailing list