PDA

View Full Version : Alert If IP has changed


kleitonsoares
2008-08-21, 08:32 AM CDT
Please, i have macs and ips locked by arp, but some users can change your ip.

Have a program to send-me messages when this user change your ip ?

Thanks a lot ! Waiting

mnisay
2008-08-21, 10:37 AM CDT
give them non-root account when logging in, so that could not execute administrative software and edit root-owned files.

you could also create a script to check IP address at interval time and let you know if there's changes.

kleitonsoares
2008-08-21, 10:43 AM CDT
give them non-root account when logging in, so that could not execute administrative software and edit root-owned files.

you could also create a script to check IP address at interval time and let you know if there's changes.


Imagine a personal laptop. For example, you come to my company and connect your laptop, i make a register of your laptop and assign a ip.... your in the other day modify your ip.

You can understand me ? how the system, arpwatch for example can inform about this ?

mnisay
2008-08-21, 10:47 AM CDT
arpwatch send IP monitoring changes via /var/log/messages , you could grep that for arpwatch

# tail -f /var/log/mesages | grep arpwatch
# cat /var/log/mesages | grep arpwatch

for ip changes
# cat /var/log/messages | grep arpwatch |grep flop

for email notification

edit /etc/sysconfig/arpwatch and make sure you have these lines

OPTIONS="-u arpwatch -e your-account -s 'Arpwatch report'"

and restart arpwatch

# service arpwatch restart

to take effect.

Hope this helps