There are a ton of technical solutions, but unfortunately determined users will find ways around a majority of them. You'll find eventually that you'll have to get somebody (perhaps the users' managers) involved to establish some sort of policy with some clear consequences. Managers will listen when you translate the time wasted with frivolous web surfing into dollars lost.
John J. Steniger Network and Security Manager Familymeds, Inc. > -----Original Message----- > From: Marc DVer [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, February 12, 2002 3:12 PM > To: [EMAIL PROTECTED] > Subject: Re: Restricting User from Changing IP > > > I'm no expert, but as has been stated here, MAC addresses can > be changed > very easily. > > If this were my situation, and if I were in a windows > enviorment, I would > lock down the computers using something like Fortres (which I > actually use, > by the way). Just lock down the desktop and users can't > change the ip. > > Marc DVer > Head of MIS > White Eagle Laboratories, Inc. > > ----- Original Message ----- > From: "Mike Fetherston" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, February 12, 2002 2:46 PM > Subject: Re: Restricting User from Changing IP > > > > or if no policies are in place restricting the users > machine, and there > > won't be any.. ever... you can limit to IP address and MAC. > i.e. set a > rule > > that states specifically both MAC's and IP's, have your > default policy to > > DENY (of course). > > > > Mike. > > > > ----- Original Message ----- > > From: "Noonan, Wesley" <[EMAIL PROTECTED]> > > To: "'Nick'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > > Sent: Tuesday, February 12, 2002 2:40 PM > > Subject: RE: Restricting User from Changing IP > > > > > > > Build your environment so that there isn't a way around?? > Seriously. > > > > > > What OS are the users using? If they aren't > administrators on Windows, I > > > don't think they can change their IP addresses. Sounds > like it is time > to > > > start revoking privileges... > > > > > > Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS > > > Senior QA Rep. > > > BMC Software, Inc. > > > (713) 918-2412 > > > [EMAIL PROTECTED] > > > http://www.bmc.com > > > > > > > > > -----Original Message----- > > > From: Nick [mailto:[EMAIL PROTECTED]] > > > Sent: Tuesday, February 12, 2002 13:32 > > > To: [EMAIL PROTECTED] > > > Subject: Restricting User from Changing IP > > > > > > I got some nasty users behind proxying / filtering server,.. > > > sometimes they change their ip address to get out from > the restrictions. > > > > > > What should I do to prevent this ? ( I use iptables ) > > > > > > TIA > > > _______________________________________________ > > > Firewalls mailing list > > > [EMAIL PROTECTED] > > > http://lists.gnac.net/mailman/listinfo/firewalls > > > _______________________________________________ > > > Firewalls mailing list > > > [EMAIL PROTECTED] > > > http://lists.gnac.net/mailman/listinfo/firewalls > > > > > _______________________________________________ > > Firewalls mailing list > > [EMAIL PROTECTED] > > http://lists.gnac.net/mailman/listinfo/firewalls > > > > _______________________________________________ > Firewalls mailing list > [EMAIL PROTECTED] > http://lists.gnac.net/mailman/listinfo/firewalls > _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
