[25828] in resnet
Re: NAT and RIAA
daemon@ATHENA.MIT.EDU (Hague, Jeff)
Wed Jan 26 12:01:44 2011
X-Barracuda-Envelope-From: jhague@rmc.edu
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-ID: <4BA084D2DCA9B44C980226B7F8A68ED6150949C49E@RMCEmail.rmc.edu>
Date: Wed, 26 Jan 2011 11:59:38 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Hague, Jeff" <jhague@rmc.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <LISTSERV%201101261141078494.896C@LISTSERV.ND.EDU>
We have been using private addresses for our entire campus for several years. We are lucky enough though to have enough public address space that we can do dynamic 1 to 1 NAT as opposed to PAT. Our NAT device (a Cisco router) logs all NAT translations to a syslog server so mapping an external address to an internal address is not difficult when we receive a DMCA notice. PAT would complicate that process because you would have to match an address and a port # at a specific time - in our case, we only need to match the address. Once we find the match in our NAT logs, we can then look up the MAC address in our DHCP logs and search our NAC (Impulse Point SafeConnect) for the machine and user.
We did find when we put our wireless network in that we had to leave the DHCP leases fairly long - MS default of 8 days. Our initial setting for wireless DHCP leases was 4 hours (I think) assuming that wireless users would roam quite a bit and deplete the DHCP scopes rather quickly. With the lease time shortened we found that our DHCP logs no longer had accurate data by the time we received a DMCA notice. By expanding our DHCP scope for the wireless network, we were able to keep the lease duration at 8 days providing plenty of time.
Jeff Hague
Network Manager & TSO
Adjunct Faculty
Randolph-Macon College
(804) 752-3710
jhague@rmc.edu
www.rmc.edu
-----Original Message-----
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Matt Foreman
Sent: Wednesday, January 26, 2011 11:41 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: [RESNET-L] NAT and RIAA
The University of Nebraska-Lincoln is trying to find out some information
about other schools experience with private IP addresses used for their
ResNet and what experiences these schools have in handling RIAA violations.
With the NAT'ing process we are having some difficulty positively
identifying all the students and we would like to understand what others in
this situation might be doing to control this problem. Whatever input you
could provide on this subject would be helpful.
Matt Foreman
UNL Information Services
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
