[KLUG Members] stop unknown static IPs on lan

[John Pesce]

Is there a way to foil attempts of employees to bring in a new computers
or laptops and plug into our corporate lan. My DHCP server is set to
only give out IPs to known ethers, but I've stumbled upon a static IP
when I tried to use it and get conflict errors.

I just tried to assign IP aliases of every unused IP on the subnet to
one machine but if I give one of them to my windows laptop it doesn't
seem to cause a conflict.


Second question, can I give my IPtables firewall a list of ether
addresses that are allowed to pass and drop everyone elses packets?