Q: It seems that any computers on my network are wi.rr.com (Road Runner) IP address handed out when they boot up, and they should get a local address of my Windows 2003 server. The IP system is not the default 192.168 . when they get wi.rr.com address either, so they have no connection to my domain.
Are there tools available to detect all computers that act as DHCP server? Ive tried DHCP Find 1.2 and it was useless.
Best Answer: On the *nix box in question type:
netstat -anp | grep LISTEN
and it'll show you all the open ports.
From another box use the nmap program (find on Yahoo! search) to scan for open ports on your boxes.
Re:Originally posted by: guy
We have a dorm area for our weekend staff, since we are a residential facility. They left it up so they can do some LAN gaming on the weekends. I already set them up with a 12 port switch, so that should more than meet their needs and not expose the network to needless risk and other stupid issues.
exactly, you met their needs, so they should get the weewees smacked if they start futzing with it/adding wireless ap's etc. Unless you said "it's yours, go to town…"
but if you have it secured ,then it shouldn't have been passing packets into your secured network…
Re:We have a dorm area for our weekend staff, since we are a residential facility. They left it up so they can do some LAN gaming on the weekends. I already set them up with a 12 port switch, so that should more than meet their needs and not expose the network to needless risk and other stupid issues.
Re:time to spank that person who plugged that wireless AP in….
NO OUTSIDE CRAP PLUGGED IN PERIOD.
if you boss won't support that, then how can they expect you to keep an operational, secure, stable network.
Re:OK, now I feel dumb. Windows XP and 2003 Server have a tool called dhcploc.exe. That worked and I found that it was a wireless hub that someone brought from home and it still had a wi.rr.com address that it was using.
Re:This is a major reason why I always set up my SBS Servers with dual NICs. When you put all the client computers downstream of the Server, it pretty much assures that all the client PCs will be forced to use the SBS Server as their Default Gateway, DHCP, and DNS Server. (Unless somebody sneaks a rogue router into the network). But, even then, SBS will detect the rogue DHCP server and complain about it. It avoids nuisances like this.
Re:find the IP address of the rogue dhcp server with ipconfig/all
that should get some information.
I've always just used features built in to network gear to prevent this from happening.
you could also try googling "detect rogue dhcp server"
0 Comments.