Feature request- dhcdrop

You guys have such a great product. I’d like to see you include something like what dhcdrop does. You can find out more about dhcdrop at http://www.netpatch.ru/en/dhcdrop.html Warning- it’s in Russian so you have to run it through google translate if you only speak english. I don’t think it would all that hard to implement for the brilliant programmers at mikrotik :slight_smile: and it would a great addition.

use scripting and dhcp client instead =)

that page isn’t working, all pages 404

http://www.netpatch.ru/dhcdrop.html

sounds like a dangerous feature to me. we usually don’t implement stuff that is not described by an official RFC

Dangerous? Well, maybe if you configure it wrong but then again lots of stuff you configure wrong might be ‘dangerous’. As for the RFC, it doesn’t do anything a client doesn’t already do.
It sends a DHCP discover packet out. If a response comes from any MAC address that you have not specified (IOW, your legitimate dhcp server), it will suck up all the addresses, preventing others from getting a bad IP address. We use it on all of our student apartment complexes where they constantly are buying and installing wireless routers incorrectly. We absolutely LOVE this software. Just thought it would make a great addition.

(hmmm I guess my response didn’t go through…trying again)

I don’t think it’s any more dangerous than any other config or feature. It sends out a dhcp discover packet and if it gets a response from a dhcp server that is not the proper one, it will suck up all the addresses it can, rendering the rogue server harmless for your users. It follows the DHCP RFC as far as I can tell. I’ve watched it in action with wireshark and it does nothing out of the ordinary. I’m sure a script is possible but for us it was easier to use dhcdrop as we use freebsd for QoS. We use it on all of our student apartment complexes as they frequently bring in wireless routers and connect them to the LAN incorrectly, causing problems for other users. We LOVE dhcdrop. It saves a lot of hassle having to drive across town if a complex can’t afford managed switches.