[25835] in resnet
Re: NAT and RIAA
daemon@ATHENA.MIT.EDU (Anthony Maszeroski)
Wed Jan 26 13:44:23 2011
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Message-ID: <4D406B72.6030309@scranton.edu>
Date: Wed, 26 Jan 2011 13:44:02 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Anthony Maszeroski <maszeroskia3@SCRANTON.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <LISTSERV%201101261141078494.896C@LISTSERV.ND.EDU>
We dump all NAT, DHCP, and NAC logs into a central syslog collector. We
built an in-house application that consume these logs, imports them into
a database, and facilitates ad hoc (web ui) and programmatic (web
services api) lookups. It was well worth the effort - it not only
facilitates processing DMCA/abuse notices, but also allows security
enforcement devices to take immediate action on policy violations (e.g.,
IDS at the network edge (post-NAT) can quarantine a user at the
switchport level (pre-NAT) by performing lookup and then calling the NAC
API).
On 1/26/2011 11:41 AM, Matt Foreman wrote:
> The University of Nebraska-Lincoln is trying to find out some information
> about other schools experience with private IP addresses used for their
> ResNet and what experiences these schools have in handling RIAA violations.
> With the NAT'ing process we are having some difficulty positively
> identifying all the students and we would like to understand what others in
> this situation might be doing to control this problem. Whatever input you
> could provide on this subject would be helpful.
>
>
> Matt Foreman
> UNL Information Services
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
--
- Anthony Maszeroski, CCNA, CISSP
-----------------------------------
Information Security Manager
The University of Scranton
email : maszeroskia3@scranton.edu
phone : 570-941-4226
-----------------------------------
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
