Re: BOOTP/DHCP security

[alan () lxorguk ukuu org uk (Alan Cox)]

> the servers IP address.  This forces the attacker to use a network
> card with a configurable MAC and usually stops attacks from machines
> belonging to the network (unless you've got this kind of card
> installed).

No. All the cards (in the PC world anyway) that don't a configurable
mac address can still be dumped into promisc mode and fake source addresses.
In effect the unprogrammable cards (very rare now anyway) simply lack the
ability to set a receive filter.

Alan