View Full Version : Alert If IP has changed
kleitonsoares
2008-08-21, 08:32 AM CDT
Please, i have macs and ips locked by arp, but some users can change your ip.
Have a program to send-me messages when this user change your ip ?
Thanks a lot ! Waiting
mnisay
2008-08-21, 10:37 AM CDT
give them non-root account when logging in, so that could not execute administrative software and edit root-owned files.
you could also create a script to check IP address at interval time and let you know if there's changes.
kleitonsoares
2008-08-21, 10:43 AM CDT
give them non-root account when logging in, so that could not execute administrative software and edit root-owned files.
you could also create a script to check IP address at interval time and let you know if there's changes.
Imagine a personal laptop. For example, you come to my company and connect your laptop, i make a register of your laptop and assign a ip.... your in the other day modify your ip.
You can understand me ? how the system, arpwatch for example can inform about this ?
mnisay
2008-08-21, 10:47 AM CDT
arpwatch send IP monitoring changes via /var/log/messages , you could grep that for arpwatch
# tail -f /var/log/mesages | grep arpwatch
# cat /var/log/mesages | grep arpwatch
for ip changes
# cat /var/log/messages | grep arpwatch |grep flop
for email notification
edit /etc/sysconfig/arpwatch and make sure you have these lines
OPTIONS="-u arpwatch -e your-account -s 'Arpwatch report'"
and restart arpwatch
# service arpwatch restart
to take effect.
Hope this helps
vBulletin® v3.7.3, Copyright ©2000-2009, Jelsoft Enterprises Ltd.