DHCP Server Callout DLL for MAC Address based filtering

re: DHCP Server Callout DLL for MAC Address based filtering

gt — Thu, 11 Oct 2007 09:31:10 GMT

It's very cool, but where is the setup document exactly?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 11 Oct 2007 10:14:54 GMT

The setup document is extracted in the same folder where u install the dll from the msi package..

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

gt — Thu, 11 Oct 2007 22:34:22 GMT

Uhhh, and where is this folder? Through install (on w2k3 r2) I can't choose the target folder, and sorry, but I don't find any files, but only a MacFilterCallout.dll in System32...

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 12 Oct 2007 12:11:41 GMT

Hey.. You dont get an option to select the target folder while installing.. By default both the callout dll and the setup document are extracted in the system32 folder.. I dont remember the name of the setup document ( word file) but its something like SetupMacCalloutFilter.doc

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

gt — Fri, 12 Oct 2007 16:36:37 GMT

Thank you for your help, the exact file name is SetupDHCPMacFilter.rtf.

re: DHCP Server Callout DLL for MAC Address based filtering

Kostas — Thu, 18 Oct 2007 13:55:32 GMT

I cant seem to find the correct configuration file syntax.

I have a file named DHCPMACFILTER.TXT, have specified its full pathname in the relevant registry key (in Parameters like said above, Win2k3 here) and inside has 2 lines:

MAC_ACTION = ALLOW

0020ED8E9E7E

The error file says that "File format not proper" and the info files that the DHCP server has started.

If I remove the MAC address and leave only the MAC_ACTION line then I get again "File format not proper" in the error file, but now the info file has:

The DHCP server has successfully started.

Thu Oct 18 13:54:52 2007 0018f3047478 Allow

Please advice further...

Thanks.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 18 Oct 2007 20:55:39 GMT

Try using the syntax MAC_ACTION={ALLOW} or MAC_ACTION={DENY}

Let me know if u still face problem..

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

akira — Fri, 19 Oct 2007 06:02:43 GMT

i cant see any logs 1033 from the event viewer.

re: DHCP Server Callout DLL for MAC Address based filtering

Kostas — Fri, 19 Oct 2007 09:48:13 GMT

Thanks for your answer, it works perfectly.

Gee... never thought the curly brackets where part of the syntax as their usual meaning is to specify the set of disticnt values allowed.

Anyway, thanks again, very useful addon.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 26 Oct 2007 11:14:00 GMT

Hey akira

If u dont see any 1033 log in the event viewer.. It means your callout dll has not been correctly loaded. Please see tht you are following the setup instructions carefully. And NOTE: while creating keys in registry.. You have to create it under: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters

Please let me know if you still face problems..

Raunak Pandya

DHCP Server Team

MAC address filtering (DHCP)

My Notes to Myself and Others... — Sat, 27 Oct 2007 13:22:20 GMT

This is a feature I have been waiting for way too long. Up until today if you wanted to have some control

MAC address filtering (DHCP)

My Local Notes to Myself and Others... — Sat, 27 Oct 2007 13:31:04 GMT

This is a feature I have been waiting for way too long. Up until today if you wanted to have some control

re: DHCP Server Callout DLL for MAC Address based filtering

Armando Ortiz — Wed, 31 Oct 2007 02:56:21 GMT

What about classifying a device (VOIP phone) so that it's thrown into a separate range of IP addresses like ISC DHCP allows for?

I can classify my phones (all NEC) based on the first three parts of the MAC ID so that they're assigned IP's in the 10.30.15 range, but never into 10.30.13 or 10.30.14.

This is a VERY DESIRED feature that isn't addressed anywhere in the DHCP services.

re: DHCP Server Callout DLL for MAC Address based filtering

SVHB — Fri, 09 Nov 2007 15:47:13 GMT

This seems to be nearly what we need for our application, but is it possible to use a range of MAC addresses?

For example we have a range of addresses for an embedded system, and we want to use DHCP for assigning an IP address, without interferance with the our office network.

Something like following will solve this :

MAC_ACTION = DENY

001A85******

Thanks in advance

Stefaan

re: DHCP Server Callout DLL for MAC Address based filtering

Curtis — Sun, 11 Nov 2007 19:21:36 GMT

This all sounds great, but I wish that instead of doing this:

MAC_ACTION={ALLOW}

000b0e994401

000b0e994402

000b0e994403

000b0e994404

000b0e994405

I could do this:

MAC_ACTION={ALLOW}

000b0e*

That way I could permit DHCP to any vendor specific device and deny DHCP to all others without having to make periodic changes to the MAC list and worry about stopping/starting the service. We have 3000+ devices (all from one vendor) that we want to get DHCP while not allowing it for anything else. Anyone know if this will work?

re: DHCP Server Callout DLL for MAC Address based filtering

Tor Arne Pedersen — Wed, 21 Nov 2007 20:20:48 GMT

Hi!

This looks great, I wish I could make it work.. I have set the values, and it all looks good. The filter file maclist.txt looks like this:

MAC_ACTION={DENY}

000742a72dea

the log says

Thu Oct 18 13:54:52 2007 000742a72dea Allow

the error file says

file format not proper

It looks like same error as above, but I have the {}, I have tried to add/remove spaces around =, but no luck. Text encoding is ANSI, I have tried UTF-8, but I guess this shouldnt make a diffecence. Where do I go from here?

Tor Arne Pedersen

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 22 Nov 2007 19:57:11 GMT

Hope you specifying the file path correctly in the registry. And also strictly take care of all the following guidelines. It should work..

• First line in the file should specify the action. Action can be either ALLOW or DENY

o When action is specified as ALLOW, all requests from MAC address present in this list will be served by dhcp servers. All requests originating from MAC address not present in this list will be ignored.

o When action is specified as DENY, all request from MAC address present in the list will be ignored by dhcp servers. All requests from MAC addresses not present in this list will be severed by dhcp server.

o Only one action out of ALLOW or DENY can be specified in MAC Address List File

• MAC address should be specified in format XXXXXXXXXXXX (where X can be hex digit 0 - F).There should not any delimiter such as -, : in MAC address. Each MAC address should be specified in separate line.

Let me know if u still face the issue.

re: DHCP Server Callout DLL for MAC Address based filtering

Tor Arne Pedersen — Tue, 27 Nov 2007 21:22:16 GMT

I redid it all, and it worked perfectly. Thanks for this tool. I wonder how I can make IPs be leased forewer, I guess callout.dll could do this.

re: DHCP Server Callout DLL for MAC Address based filtering

Arlen — Thu, 29 Nov 2007 04:47:16 GMT

Is the Callout filtering can support wildcard if I want to deny all as to 101010 beginning MAC addresses?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 29 Nov 2007 09:31:14 GMT

As of now the callout dll doesn't support wildcards.

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Arlen — Fri, 30 Nov 2007 03:41:23 GMT

I would like to know that Infolog files have the max size constraints.

re: DHCP Server Callout DLL for MAC Address based filtering

SENTHIL SIVALINGAM — Fri, 07 Dec 2007 15:10:59 GMT

Even after adding the mac address in the allow list, server is not serving IP to the specified pc. seems some bug on the dll.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 07 Dec 2007 16:16:31 GMT

Hey Senthil,

Can you plz tell me what problem exactly you facing.. Can yo check the Log file and see the message.. The dll has been tested and seem to work fine for others too.. Please check your settings as mentioned in the rtf file. If you still face trouble please get back to me..

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

SENTHIL SIVALINGAM — Mon, 10 Dec 2007 09:14:05 GMT

Hey Pandya

I perfectly configured as per the doc, when I see the log there were many deny messages for the Mac address which is in allow list.

My environment is Win2k3-Sp2 and in fact I have checked with a desktop and few laptops mac addresses included in the allow list. But as per the log those are comes under denied.

Looking for your help.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 10 Dec 2007 16:30:51 GMT

Do you have deny and allow both configured?

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

SENTHIL SIVALIGAM — Tue, 11 Dec 2007 15:32:45 GMT

Hey

I have configured only Allow list.

re: DHCP Server Callout DLL for MAC Address based filtering

Chris G — Wed, 12 Dec 2007 00:22:53 GMT

Thanks for this tool! I see that wildcards are not supported, but are there plans to support mac wildcards in a future release?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 12 Dec 2007 07:40:05 GMT

Hey Senthil,

I wonder why the tool isn't working for you.. We have tested it here.. It works fine.. Its working fine for so many other users after posting it here.. I would once again suggest you to double check your configuration..

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Juergen Weickl — Wed, 12 Dec 2007 18:20:27 GMT

Is it planned to add wildcard feature to your tool?

As on other post here I would like to deny all requests from e.g. IP phones.

Best regards,

Juergen

re: DHCP Server Callout DLL for MAC Address based filtering

Erik — Mon, 17 Dec 2007 20:25:22 GMT

Thx so much for this addition. I was really cursing MSDHCP until I found this bit. It works great, and plan on rolling it into production soon.

re: DHCP Server Callout DLL for MAC Address based filtering

AdamF — Wed, 19 Dec 2007 03:40:02 GMT

Is it possible for the callout to have an allowed mac address list per subnet?

To explain: We wish to secure our devices (thin clients) from being moved physically from office to office (subnet to subnet).

re: DHCP Server Callout DLL for MAC Address based filtering

Jonathan — Fri, 21 Dec 2007 23:09:35 GMT

I followed the directions precisely and it worked great. Thanks for including something that SHOULD have been included OEM on the DHCP server.

Cheers

Jonathan

re: DHCP Server Callout DLL for MAC Address based filtering

Oyunbat — Wed, 26 Dec 2007 08:55:38 GMT

Dear Raunak Pandya

I have configured Collect DLL for my DHCP server but it's not running. i think my configure is OK but why not working?

"This key specifies callout dll path for dhcp server e.g. c:\calloutdll\<calloutdll name>.dll" this description's "calloutdll name" is which file ? may i put in MacFilterCallout.dll file there? is it right?

please tell me all of configuration how do it exactly if it possible?

thanks

re: DHCP Server Callout DLL for MAC Address based filtering

SENTHIL SIVALINGAM — Wed, 02 Jan 2008 16:51:49 GMT

Hi Raunak

A quick question to you. Do we need to restart the service whenever we are adding mac address on the allow list? Cos the server doesn't supply IP's without restart, simply denies.

I think thats where the issue I had faced last time.

re: DHCP Server Callout DLL for MAC Address based filtering

Rick Ng — Thu, 03 Jan 2008 15:43:27 GMT

Excuse me, but I don't have the money to set up a W2K3 machine. Can callout DLL work on a XP Home acting as a gateway? And is callout DLL uninstallable?

re: DHCP Server Callout DLL for MAC Address based filtering

Aaron — Fri, 11 Jan 2008 06:59:47 GMT

Must you restart the DHCP Service when you modify the MAC filter list?

re: DHCP Server Callout DLL for MAC Address based filtering

Jens — Tue, 15 Jan 2008 19:08:54 GMT

I tested this tool on two distinct dhcp servers and they both denied all IP addresses even though there was only one MAC address in the config file with the DENY option or allowed them all, again even though there was only one MAC address in the config file with the ALLOW option :-(. This also applied after I restarted the DHCP server service..

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 16 Jan 2008 08:22:03 GMT

Hi Senthil/Aaron,

Ya. You must restart the service after you modify the MAC list as all the addresses are read at the time of service start.

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 16 Jan 2008 08:25:50 GMT

Hey Jens,

Have you checked whether the event 1033 is getting logged at the time of service start?

Also strictly take care of all the following guidelines. It should work..

• First line in the file should specify the action. Action can be either ALLOW or DENY

o Only one action out of ALLOW or DENY can be specified in MAC Address List File

Let me know if u still face the issue.

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

S.M. — Thu, 17 Jan 2008 16:51:32 GMT

Dear Raunak Pandya

Thanks for this tool

Is it planned to add comments to file with MAC addresses? It would be easier to find to whom belongs specific MAC address.

S.M.

re: DHCP Server Callout DLL for MAC Address based filtering

Jens — Mon, 21 Jan 2008 20:47:02 GMT

ok.. it seems to be working now.. my "problem" was that I wrote the MAC address with capital letters instead of small letters. If I write

MAC_ACTION={ALLOW}

0050569337ad

it works but not for

MAC_ACTION={ALLOW}

0050569337AD

thanks alot,

Jens

re: DHCP Server Callout DLL for MAC Address based filtering

Steve — Wed, 30 Jan 2008 02:44:08 GMT

Running on Server 2003 R2 x64

When starting the DHCP Server service, I receving:

"The DHCP service has failed to load one or more callout DLLs. The following err occured: %1 is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. is not a valid Win32 application. "

re: DHCP Server Callout DLL for MAC Address based filtering

Matthaus — Thu, 31 Jan 2008 18:10:33 GMT

Just wondering what happens regarding existin reservations?

Do the MAC address's for these existing reservations need to be added to the the allowed list or will they just work any?

re: DHCP Server Callout DLL for MAC Address based filtering

David — Sat, 02 Feb 2008 09:17:33 GMT

Can you point the callout DLL to a radius server??

re: DHCP Server Callout DLL for MAC Address based filtering

David — Sun, 03 Feb 2008 22:45:00 GMT

Is there an option to send request to a radius server instead of a text file??

re: DHCP Server Callout DLL for MAC Address based filtering

Scott Pascoe — Tue, 05 Feb 2008 19:33:44 GMT

Would it be possible to put the source for this callout on www.codeplex.com so that the community can extend it?

Thanks, Scott Pascoe

re: DHCP Server Callout DLL for MAC Address based filtering

Russel — Fri, 15 Feb 2008 02:19:37 GMT

I agree with S.M.

We need to be able to add comments.

Great tool though.

re: DHCP Server Callout DLL for MAC Address based filtering

Jonathan — Fri, 15 Feb 2008 17:59:47 GMT

Great tool, I´ve been wondering for a long time why the Windows DHCP-service is so "insecure". Not anymore :)

re: DHCP Server Callout DLL for MAC Address based filtering

S.M. — Mon, 18 Feb 2008 14:12:08 GMT

to Matthaus:

I think yes. I added these MAC addresses to the allowed list. Otherwise these hosts didn't receive config from DHCP.

re: DHCP Server Callout DLL for MAC Address based filtering

Nreis — Wed, 20 Feb 2008 15:22:44 GMT

The Attachment only have the msi file nothing else.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 21 Feb 2008 07:42:00 GMT

Hey Nreis,

Yes the attachment only has msi file. This will unpack the dll and the setup document.

The location of that is mentioned in the blog:

"Both the dll (MacFilterCallout.dll) and the Setup document (SetupDHCPMacFilter.rtf) are copied on to %SystemRoot%\system32 folder after installation."

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

SAANRA — Wed, 27 Feb 2008 20:15:03 GMT

Does the DHCP server crashes due to wrong MAC format entry in DHCP filter.? I mean I entered o instead of ZERO by mistake.

Pls answer me , saanra@gmail.com

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 28 Feb 2008 07:46:38 GMT

Hey,

We haven't verified this but feel it shouldn crash instead should log an error message in the log file.

Can you check if any message is logged and when you seeing the crashing while starting the service?

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Johnny — Sun, 02 Mar 2008 18:19:06 GMT

On my setup, using deny, I need to have two macs in the maclist.txt file for this to work. When I had only one mac addr listed, it allowed the dhcp server to assign ip anyhow. I added a second mac to the list, unused addr actually, and restarted dhcp. Now it works. Mac address being denied fine. Its funny how the {} brackets are literally needed in the action line for it to work.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 03 Mar 2008 17:14:49 GMT

AFAIK, maclist.txt with only one mac address also works fine. You shouldn't be facing any issues unless you did something wrong in the format in which it needs to be specified. Can you check with the output of the log whats the behavior when you specify a single mac address.

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Luke — Mon, 03 Mar 2008 21:28:14 GMT

Has anyone tried this with a larger environment of approximately 5,000 DHCP clients? Any performance issues?

re: DHCP Server Callout DLL for MAC Address based filtering

Daanoz — Tue, 04 Mar 2008 03:03:58 GMT

Hey,

The tool looks great, but somehow i can't get it to work... installed, loaded up the reg settings, rebooted the DCHP... nothing, so i kinda made sure the maclist.txt has error's in it and i notice that also no log files were generated. So it seems like the callout isn't loaded...

DHCP Reg settings: http://img527.imageshack.us/img527/4114/dhcpsettingsqo7.jpg

Hope anyone can help

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 04 Mar 2008 07:44:55 GMT

Hey Dannoz,

Did you check the event viewer for event 1033 whether the dll is loaded or not. Which OS you are using and on what platform?

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Daanoz — Tue, 04 Mar 2008 11:11:30 GMT

Thx, that helped :) i got an error 1034 saying: The specified module could not be found.

Solution: Changing the "%SystemRoot%" variabele to my hardcoded systemroot (e:/WINDOWS/system32/)

running on:

Windows server 2003 R2

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 04 Mar 2008 11:53:31 GMT

Ok,

Thats because %systemroot% would mean only e:\windows

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

tn09ac6723 — Wed, 05 Mar 2008 21:06:19 GMT

I have configured the same way ...it works great.

re: DHCP Server Callout DLL for MAC Address based filtering

Ajith KUMAR — Wed, 12 Mar 2008 11:55:52 GMT

Seems to be working. It can be improved, for sure.

As we have to re-start the service everytime when there are changes in the MAClist file, is there any way to make it dynamic.

Regards,

Ajith KUMAR

re: DHCP Server Callout DLL for MAC Address based filtering

Guenter — Thu, 13 Mar 2008 19:22:02 GMT

Hy Raunak

I configured the DLL with this options, but no event 1033 and no error

The dll is under C:\CallOut\MacFilterCallout.dll

In the macfile located C:\CallOut\MacList.txt

MAC_ACTION=ALLOW

008064*

The registry settings are the folowing

CalloutDlls C:\CallOut\MacFilterCallout.dll

CalloutEnabled = 1

CalloutMACAddressListFile = C:\CallOut\MacList.txt

What do I wrong??

Thank`s for your help

Günter

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 13 Mar 2008 19:40:04 GMT

Hey Guenter,

Which OS you are using and what flavour? On successful loading of dll you should see the event 1033.Also configure the log and info files. And one thing to take care here. It doesn;t support wild cards as you have specified.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 13 Mar 2008 19:40:05 GMT

Hey Guenter,

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Bruno — Thu, 13 Mar 2008 23:34:47 GMT

Excellent tool.

This tool resolved my problems.

Thank You.

re: DHCP Server Callout DLL for MAC Address based filtering

Guenter — Fri, 14 Mar 2008 09:44:50 GMT

Hy Raunak

thank`s for answer.

I use Windows Server 2003 32bit Standard Edition with SP1 german.

The Server is a Domain Controller

I configured the LogFile in the same path in registry.

HKLM\System\CurrentControlSet\Services\DHCPServer\Parameters

CalloutErrorLogFile = C:\CallOut\error.log

CalloutInfoLogFile = C:\CallOut\infolog.txt

and I change the MacFile to the folling for testing.

MAC_ACTION=ALLOW

00184D33194E

I restart my DHCP Server and nothing.

No LogFile created, no 1033 event

Only the event 7035 (starting DHCP) and 1044 (Authentification DHCP) as information in the eventlog are present.

What goes wrong??

Must I register Calloutdll with regsvr32??

So, we have a lot of Wyse Terminal they are all beginning with 008064, so my additional question is, is it possible to configure CalloutDLL only give this

MAC Segment a DHCP Adress or have I to write all possible adresses to the MacFile???

Thank`s for your help

Günter

re: DHCP Server Callout DLL for MAC Address based filtering

Atle — Fri, 14 Mar 2008 14:59:29 GMT

Installed on Win2003 x64. Get error 1034, The DHCP service has failed to load one or more callout DLLs. The following error occured:

%1 is not a valid Win32 application. is not a valid Win32 application. Any solution? Or is it just for x32-systems?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 17 Mar 2008 09:13:37 GMT

Hey Atle,

The dll currently works on x86(32-bit) flavours only..

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Zaid — Sun, 23 Mar 2008 11:01:15 GMT

At last I regain control of DHCP lease!

thanks for the tool, one note though; it seems that MAC addresses must be typed using lower case letters, I couldn't get it to work while typing in CAPITAL!

re: DHCP Server Callout DLL for MAC Address based filtering

Günter — Fri, 28 Mar 2008 12:06:29 GMT

Hy Raunak

I can start call-out with the event 1033 in the eventlog, but in error.log the messages

"File format not proper" is insert always I start it.

My MacList.txt File look like this

MAC_ACTION=ALLOW

00184d33194e

What`s going wrong?

Thanks for help

Günter

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 28 Mar 2008 16:49:35 GMT

Hey Gunter,

The format you have specified is wrong. Please see the comment above. You need to place curly braces around Action (ALLOW/DENY} like: MAC_ACTION = {ALLOW/DENY}

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Paul Wightman — Wed, 02 Apr 2008 12:49:54 GMT

Hi Guys,

Is there any way to specify multiple mac lists, we intend to put the mac lists in DFS and have all our servers reference it so that we have a central allowed list of machines. It would be nice if you could maintain a mac list per site and have each server load all the site mac list one by one on start.

This is just a bit more manageable than 1 big file.

Tried the following for the CalloutMACAddressListFile Key with no luck.

C:\WINNT\system32\MiltonMAC.txt;C:\WINNT\system32\RiseleyMAC.txt

Thanks

Paul

re: DHCP Server Callout DLL for MAC Address based filtering

Jim Kirk — Fri, 04 Apr 2008 04:10:12 GMT

Great tool, let me add to the comments from others... ned a simple way to add a comment so we can easily associate mac addresses to users/machines. even if you read the MAC address digits and ignored anything else on the line would be fine

re: DHCP Server Callout DLL for MAC Address based filtering

Paul — Fri, 04 Apr 2008 17:42:46 GMT

Hey thanks for the tool. I don't seem to be able to get it working. I have a 2k3 server. I did all the registry entries correct. I have check three times. the DLL seems to log the MAC addresses it has allowed and given DCHP address. Here is my maclist.txt file.

MAC_ACTION={DENY}

***********

I have checked for spaces still nothing. the 1033 message comes up that the DLL has been loaded. not sure what is going on here..

I have Five Registry entires under.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters

CalloutDlls

C:\calloutdll\MacFilterCallout.dll

CalloutEnabled = 1

CalloutErrorLogFile

C:\calloutdll\log.txt

CalloutInfoLogFile

C:\calloutdll\log.txt

CalloutMACAddressListFile

C:\calloutdll\maclist.txt

Path to the DLL is

C:\calloutdll

Log file out put has no errors only list of mac addresses with allow beside it.. Any help would be greatly welcome..

Paul

re: DHCP Server Callout DLL for MAC Address based filtering

tinglima — Wed, 09 Apr 2008 02:36:36 GMT

This tool works great with Windows machines. I recently found that it does not work with Apple Computers. I have the MAC_ACTION set to allow and the maclist contains all MAC addresses I want to allow. Even with Apple computer MAC addresses excluded from the list they still get an ip address from the DHCP server. Can anyone out there confirm this in their network environment?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 09 Apr 2008 07:45:19 GMT

Hey Paul,

Can you have two different files for error log and info log and try again. See whats the output generated in them.

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Craggar — Wed, 16 Apr 2008 00:25:17 GMT

How do you uninstall the filter?

re: DHCP Server Callout DLL for MAC Address based filtering

Walter Albrecht — Wed, 16 Apr 2008 15:34:14 GMT

Raunak

Are there plans to allow this tool to work on Server 2003 R2 x64 ?

Thanks in advance.

re: DHCP Server Callout DLL for MAC Address based filtering

travis — Tue, 22 Apr 2008 21:16:51 GMT

Is the source code available for this project?

I was going to write something along these lines but with additional custom features for our company and this would be a great starting point for us.

Thanks!

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 23 Apr 2008 05:21:56 GMT

Hey Travis,

The source code for the tool cannot be made available however you can take a look at the following blog to see the callout api usage.

http://blogs.technet.com/teamdhcp/archive/2007/11/27/callout-api-usage.aspx

Thanks,

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Krishnan — Wed, 23 Apr 2008 10:42:15 GMT

I have MAC list file of around 28 MB, there is no issue in configuration everything is perfect, but DHCP Fails to start and throws error 1053, Event Viewer says dll is not loaded due to exception 3221225725

re: DHCP Server Callout DLL for MAC Address based filtering

Joe — Wed, 23 Apr 2008 17:16:47 GMT

Hello there,

Please help me, I'm always having an

"File format not proper" error in my ErrorLogFile.txt. I can see the 1033 in the event veiwer. I have server 2003 installed in VMware workstation.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters

CalloutDlls

C:\callout\MacFilterCallout.dll

CalloutEnabled = 1

CalloutErrorLogFile

C:\callout\ErrorLogFile.txt

CalloutInfoLogFile

C:\callout\InfoLogFile.txt

CalloutMACAddressListFile

C:\callout\MACList.txt

C:\callout

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 24 Apr 2008 07:43:22 GMT

Hey Joe,

I dont see any problem with your registry settings here. Your dll is also being loaded perfectly as you see the event 1033 in the event viewer. You get the error "File format not proper" when the MAC addreses in the file MACList.txt are not entered correctly.

You can refer to the blog below to take a look at the format needed for this file. The following information is also there in the Setup document which is placed in the Windows\System32 folder when you run the msi.

http://blogs.technet.com/teamdhcp/archive/2008/03/14/dhcp-server-callout-dll-for-mac-address-based-filtering-mac-address-list-file-format.aspx

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 24 Apr 2008 08:00:06 GMT

Hey Krishnan,

Looks like that the callout dll is taking significant time in parsing the large MACList file initially as a result of which the service fails to start. I would like to know are you facing the problem for less number of entries?

I would also like to get some more information from you. 28 MB for MACList file seems to quite huge size. Could you please tell us the scenario where you need so many entries in the file and to what extent can wildcard support help you out here?

Thanks

Raunak Pandya

DHCP Server Team

Block MAC Address melalui DHCP Server

MS Server Tips n Tricks — Wed, 30 Apr 2008 10:14:11 GMT

Dalam Windows Server 2003 dapat dilaksanakan blocking MAC Address melalui DHCP Server. Seperti kita ketahui

re: DHCP Server Callout DLL for MAC Address based filtering

Brahma Biketan Biswal — Wed, 30 Apr 2008 15:02:34 GMT

Hi ,

I need to allow only company Mac address will get IP .If some one outsider wants IP from our DHCP server until entering his/her Mac address in to allow list he /she should not get IP address from our DHCP server 2003 .

Please help me the script and step by step configuration..

Thanks

Brahma Biswal

re: DHCP Server Callout DLL for MAC Address based filtering

dulubiswal — Wed, 30 Apr 2008 16:12:29 GMT

Hi ,

Please help me the script and step by step configuration..

Regards

Biswal

1033 from the system event viewer?

Magnus — Wed, 30 Apr 2008 21:57:35 GMT

Is the 1033 event in the system event viewer the only indication that the dll is working? I think everything is placed right but still no message. Using server 2003 SP2.

CalloutDlls C:\calloutdll\MacFilterCallout.dll

CalloutInfoLogFile C:\calloutdll\infolog.txt

CalloutMACAdressListFile C:\calloutdll\MAClist.txt

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 01 May 2008 07:40:20 GMT

Hey Biswal,

You can do the needful using this tool. You need to add all the MAC Address which you want to allow in the format specified in the setup document which gets unpacked when you install the above. The step by step configuration details are also mentioned there. Please go through it.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 01 May 2008 07:43:15 GMT

Hey Magnus,

When the callout dll gets loaded you should be able to see the event 1033. If you fail to see tht it means tht callout dll hasn't been loaded yet. From the cofigurationdetails above I see that you havent enabled the callout dll. You need to create another registry entry 'CalloutEnabled' and set it to 1. Refer to the setup document for details.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Aries — Fri, 02 May 2008 04:01:11 GMT

Hi Thanks for this great tool, my question is How can I put comments on each MAC address to esily determine how is the owner.

Ex.

MAC_ACTION={ALLOW}

000b0e99440c (Aries' PC)

000b0e99440d (Guest1's PC)

Thanks

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 02 May 2008 07:39:52 GMT

Hey Aries,

Currently in this version of the tool it is not supported to enter comments.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Aries — Fri, 02 May 2008 12:05:33 GMT

Hi TeamDHCP,

I have a question,

I tried to ALLOW a MAC to connect, the PC able to access and get an IP then I removed the MAC address of the same PC (restart DHCP) and retry to connect. The PC can still get an IP address from the DHCP, even the log shows that it was denied.

Is this due to the IP-MAC lease is still at the DHCP scope or at the DHCP database?

What sould you do so once you remove the MAC from the list, it will no longer get any IP from the server.

Thanks,

Aries

1033 from the system event viewer?

Magnus — Fri, 02 May 2008 19:44:57 GMT

CalloutEnabled ande set at 1

I have it set but I still see no 1033? I see a 1044?

Am I suppose to look in the System Event viewer?

Magnus

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Sat, 03 May 2008 09:28:57 GMT

Hey,

Once the IP address is leased, the client would be able to use it till it gets expired. When this machine comes up after restart it tries to check the ip address it is holding. In the event of DHCP Server not present or not replying(which is the case if filter is configured) it would continue to use the old IP aaddress till it gets expired and after that when it tries to renew its IP, the server will not respond.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Joe — Tue, 06 May 2008 13:34:25 GMT

Its working perfectly now, you are correct no problem in registry, the problem is in the MAC addresses. i change all capital letter to small letter and its work. Thanks for the Tips

Joe

re: DHCP Server Callout DLL for MAC Address based filtering

Joe — Tue, 06 May 2008 13:43:22 GMT

We have 12 subnets and each subnets we have dhcp server. the problem now is most of our user specially in sales and marketing department are shifting from one place to anther. is that possible that in the registry of the other subnet are pointing to only one dhcp server instead of creating it one by one. as you it is a nightmare for me to add all the mac addresses of all PC's and then restarting again the dhcp server.

Thanks in advance

re: DHCP Server Callout DLL for MAC Address based filtering

Ken — Wed, 07 May 2008 21:02:18 GMT

Is there a way to get the MAC addresses currently in use out of a log file so one doesn't have to hand enter all of the existing clients?

Thanks......

re: DHCP Server Callout DLL for MAC Address based filtering

Jeff — Wed, 14 May 2008 22:29:28 GMT

New feature request:

We have a laptop that moves between several subnets (vLANs) within an hour. We would like to reserve an ip address in each dhcp scope (subnet) for one mac address without manual intervention. For example,

superscope

scope (172.16.1.0/24):

reserve ip address 172.16.1.1 for mac address: 0000aaaa1111

scope (172.16.2.0/24):

reserve ip address 172.16.2.1 for mac address: 0000aaaa1111

...

scope (172.16.n.0/24):

reserve ip address 172.16.n.1 for mac address: 0000aaaa1111

Currently, Microsoft Windows 2003 SP2 dhcp server allows for entering the same mac address in these scopes, but fails to give the laptop the correct ip address.

Please let me know if this tool could be modified to allow this scenario. Or if a new tool would be needed. In either case, when would it be available for general use if at all.

Thank you,

re: DHCP Server Callout DLL for MAC Address based filtering

Jeff — Wed, 14 May 2008 22:38:14 GMT

Ken,

Create a script using the "DOS" command getmac and loop through your ip address ranges (/S ip address)...

GETMAC [/S system [/U username [/P [password]]]] [/FO format] [/NH] [/V]

Description:

This command line tool enables an administrator to display the MAC address for one or more network adapters on a system.

Hope this helps,

DHCP MAC Filtering

ADSide — Thu, 15 May 2008 18:01:55 GMT

Sul blog del team Microsoft che si occupa del servizio DHCP è disponibile una DLL " DHCP Server

re: DHCP Server Callout DLL for MAC Address based filtering

Peter M — Wed, 04 Jun 2008 16:55:39 GMT

I get an error in my errorlog stating "Could not open the data file"

THe filter file is in the c:\calloutdll directory, the registry matches the file name MAClist.txt and the directory and the file are readable by Admins, SYSTEM, and Users.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 05 Jun 2008 09:16:21 GMT

Hey Peter,

Can you check the event viewer and tell me what event is logged. Alos please cross check your registry configuration(keys and values). Which OS you are using?

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

rayray — Wed, 11 Jun 2008 07:29:32 GMT

I'm running two scopes on 1 physical dhcp server.two interface running dhcp server,Interface1 is 192.168.10.x and interface2 is 192.168.20.x..Is this tool

possible to implement with this scenario?Thanks!

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 11 Jun 2008 09:59:39 GMT

Hey,

Yes it should be possible to implement this scenario.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

chad — Wed, 11 Jun 2008 21:21:14 GMT

Is there any workaround to block with statically configured client pc?

how do i know if there are statically configure client in my network? some users

are capable of doing the static ip.

anyway,i got it working flawlessly.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 11 Jun 2008 23:28:06 GMT

Hey,

All the Clients which are shown in DHCP Server as active leases are the one which have dynamic ip. A statically configured client's entry wont be there in DHCP. What you could do is take the MAC addresses of all the leases in at any point of time in DHCP Server and add them to allow list. All other clients would hence be automatically dened.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

rayray — Fri, 13 Jun 2008 01:25:35 GMT

Hi team DHCP,

thanks again for this useful tool.i made it work with my two interface dhcp server but there's an issue,those mac address from both interface network are all accepted on the MACList file.I need the two network(192.168.10.x & 192.168.20.x) to be independent to each other.mac address on 10.x should be deny on 20.x network and vice versa.

is this doable?

rayray

re: DHCP Server Callout DLL for MAC Address based filtering

Chris — Thu, 19 Jun 2008 19:19:21 GMT

Hey DHCP Team,

Great tool!

Question: How will this work with 802.1x? If a client fails 802.1x can I add the machine MAC to the list and have it added to a "Guest VLAN" / Subnet?

Thanks

Chris

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 20 Jun 2008 07:33:48 GMT

Hey Chris,

It should work with 802.1x as well. However I did not understand what do you mean by saying have it added to a "Guest VLAN" / Subnet.

re: DHCP Server Callout DLL for MAC Address based filtering

omid — Mon, 14 Jul 2008 12:55:31 GMT

hello

all config for me is correct but it does not run 1033 log

please help me

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 15 Jul 2008 07:30:54 GMT

Hey Omid,

Do you see anything in the error log? Do you see event 1033/1034? Which OS you are using? Also share the platform on which you are running?

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Jay Wilcox — Wed, 16 Jul 2008 23:47:04 GMT

What would happen if a computer was introduced to the network with a proper static configured IP address but the MAC address of this computer was not in the data file of acceptable MAC addresses.

Would the computer still gain access to the network or would there be an IP conflict. Also what if that IP address being used by the computer in question was already assigned to a viable computer in the network/domain?

re: DHCP Server Callout DLL for MAC Address based filtering

Richard Brickman — Wed, 23 Jul 2008 00:55:50 GMT

Vista Business not working!

Works great for XP Pro and Vista Home, but Vista Business Machines never get an IP. Cannot determine the blockage/problem. Anyone?

re: DHCP Server Callout DLL for MAC Address based filtering

Joe Z — Fri, 25 Jul 2008 15:47:00 GMT

I just want to be clear..

If i set a mac address to JUST deny- it will deny that but ALLOW everything else? or do i have to manually put in all MAC addresses in the ALLOW list?

re: DHCP Server Callout DLL for MAC Address based filtering

Michael VanDusen — Fri, 25 Jul 2008 21:26:53 GMT

I am having the same problem with Vista Buiness. The macs on those machines are on the allow list but the do not pull a ip address from the DHCP server.

Mike V

re: DHCP Server Callout DLL for MAC Address based filtering

Michael VanDusen — Fri, 25 Jul 2008 22:51:27 GMT

I just tested this again on Windows XP Pro and it worked fine. When testing on Windows Vista Business and Enterprise the systems do pull a ip from the DHCP server when using the call dll. It is loaded up fine and there are no filter errors on the server. Anyone else having this issue.

Mike VanDusen

re: DHCP Server Callout DLL for MAC Address based filtering

Michael VanDusen — Fri, 25 Jul 2008 22:52:30 GMT

Correction to the previous post, the Windows Vista Business and Enterprise do not pull a ip address.

Mike VanDusen

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Sat, 26 Jul 2008 19:04:56 GMT

Hey Joe,

Yes you are correct. If you set the action to DENY it will deny only MAC addresses in the list and allow all others.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Richard Brickman — Tue, 29 Jul 2008 20:08:58 GMT

Vista Business Problem

I cannot find a solution for the problem.

I am looking at using the program for blockage to stop someone that does not know the IP range from simply plugging in a foreign computer, exlcuding a range from DHCP, and using that range to statically assign IP's to vista business machines. I still need an allowed range for my VPN Clients. Anyone finding a solution for vista business can email me directly: admin@coloabc.net

re: DHCP Server Callout DLL for MAC Address based filtering

Michael VanDusen — Wed, 06 Aug 2008 21:03:22 GMT

Are there any fixes for Windows Vista Enterprise or Business yet? This is in reference to the callout dll.

Michael VanDusen

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 07 Aug 2008 08:11:52 GMT

Michael,

Can you clarify on the fixes, that you are looking for?

The callout dll must run on a Windows 2003/2008 DHCP server and can block/allow Vista or other clients from accessing the network.

Ajay

Team DHCP

re: DHCP Server Callout DLL for MAC Address based filtering

Brent — Thu, 07 Aug 2008 22:02:19 GMT

Have you developed a version for x64 or is there a date that it will be available? I received the 1034 event that it's not a valid win32 app.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 08 Aug 2008 08:38:35 GMT

Brent,

We are looking into the feasibility of offering 64 bit support for this DLL and expect to have an answer in a couple of weeks.

You can contact us via email at msnetworkteam_AT_live_DOT_com, with any further queries on this topic.

Ajay

Team DHCP

re: DHCP Server Callout DLL for MAC Address based filtering

JoviLeung — Sun, 10 Aug 2008 12:43:04 GMT

What is the different between MACFilter and Reservation?

What if someone knows one of the MAC address and change to it, could DHCP server detect it?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 11 Aug 2008 07:43:52 GMT

Reservation : You can reserve a specific IP Address, based on the MAC address for that interface. Eg. If your fileserver NIC has a MAC address of 01:00:11:22:33:44, you can setup a reservation, such that it always receives an IP Address of 192.168.1.10 from the DHCP Server.

MAC Filter : Filters are used to either allow or deny IP Addresses to specific interfaces, based on the MAC address. Eg. You can disable a rogue WAP from gettting an IP address, by adding it's MAC address to the filter file.

Ajay

Team DHCP

re: DHCP Server Callout DLL for MAC Address based filtering

Paul — Mon, 25 Aug 2008 12:21:53 GMT

Hello.

I am trying to use this dll but my W2k3 machine won`t load it. The registry values seem to be corect. The paths also. In event viewer i only get 1044. No 1033 :(

What could be wrong? :(

Help.... please..

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 25 Aug 2008 15:46:52 GMT

Hey Paul,

Event Id 1044 is related to DHCP Server Rogue Authorization. It is not related to callout dll. If you have configured the following registry values correct, you must either see event 1033 or 1034 getting logged. If you see 1034, that means there are some issues loading the dll and we proceed further from there then. Could you please recheck and get back.

CalloutEnabled,

CalloutDlls

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Austin — Mon, 25 Aug 2008 18:39:37 GMT

Any chance there is sample source code perhaps .net source code for this?

Thanks

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 26 Aug 2008 10:28:05 GMT

Hey Austin,

You can refer to the following blog for callout api usage. However the sample code is not in .NET but is unmanaged code.

http://blogs.technet.com/teamdhcp/archive/2007/11/27/callout-api-usage.aspx

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Jordan — Wed, 27 Aug 2008 12:16:10 GMT

By the way, should I stop the DHCP Service first if I need to modify (add or remove entries) from MAClist.txt file?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 27 Aug 2008 22:03:40 GMT

Hey Jordan,

Yes you need to restart the DHCP Server service each time after you modify the MACList.txt file.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

cbielich — Sun, 31 Aug 2008 11:04:30 GMT

I am getting the "is not a valid Win32 application" Event ID 1034 as well and I am running a x32 version of server 2003. Whats wrong?

How to restict the static IP configured users from DHCP Server Callout DLL for MAC Address based filtering

Ananthi.S — Tue, 16 Sep 2008 11:39:52 GMT

I have successfuly configured Callout DLL and it is working fine. But how to restrict the users which are configured static IP address in their PCs themselves.

Kindly reply me as soon as possible.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 16 Sep 2008 15:50:40 GMT

Ananthi,

Clients that have been configured with a static IP address, will not be contacting the DHCP server for an IP address.

If you want to ensure that the static IPs are not leased by the DHCP Server - you should have them as an exclusion range within the scope.

Ajay

Team DHCP

Reserved and Static IP's

Charles — Fri, 26 Sep 2008 00:10:17 GMT

I have reserved IP addresses in DHCP for some network equipment and printers on my network. For my servers and firewalls I have assigned static IP's. These IP's are also excluded from distribution.

Do I need to add the MAC addresses for these devices to the MACList.txt?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 26 Sep 2008 07:43:39 GMT

Hey Charles,

If you have assigned static IP to them then you dont need to add them to MACList.txt.

However, I had a question concerning your deployment. Why have you reserved the addresses when you assigning them statically? You could instead remove the exclusions, static addresses on printers and let just the reservations be there. By this way, the printers would be getting the same IP addresse from DHCP server.

Note: In the second way, you would need to add the entry in the MACList.txt.

Let me know if have any doubts here,

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Charles — Fri, 26 Sep 2008 16:23:05 GMT

Servers and firewall IP's are assigned statically, they are not reserved.However, these IP's are in the excluded range.

Printer IP's are reserved, they are not assigned statically.

So just to be clear, I would need to add the printers to the MAClist.txt but not the servers and firewalls?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Sat, 27 Sep 2008 22:27:12 GMT

Hey Charles,

Yes, You are correct.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Tom Seether — Thu, 16 Oct 2008 16:28:27 GMT

This works great! Thank you!!!

re: DHCP Server Callout DLL for MAC Address based filtering

David Hutton — Thu, 30 Oct 2008 14:47:30 GMT

I have installed as instructed and used an allowed function on a windows server 2003 sp 2. Everything seems to be fine and am getting the 1033 event id etc but it is allowing everything to get an address. the file is as follows

MAC_ACTION = {ALLOW}

001b77bebf89

001b77db7024

etc.

any ideas.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 30 Oct 2008 15:37:30 GMT

Hey David,

Do you see anything in the errorlog/infolog file??

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

aslan123 — Thu, 30 Oct 2008 19:11:23 GMT

Sorry to be stupid but I missed typed the maclist file in the registry. When I typed it properly it worked absolutely fine. Many Thanks David Hutton

re: DHCP Server Callout DLL for MAC Address based filtering

Sheldon — Fri, 21 Nov 2008 20:47:00 GMT

It is great for filtering student laptops via wireless we only allow our equip. but I also have 350 desktops. Doesn't the MAC list need to have ALL devices on the network or I would be denying my office worker's machines an address?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 21 Nov 2008 21:05:33 GMT

Hey Sheldon,

Yes you would need to add MAC ADDRESSES of all the devices to allow so that you can block laptops od students.

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Shuja — Tue, 25 Nov 2008 12:09:23 GMT

Hi All,

I am not able to download callout DLL setup.exe to implement on windows W2K3, if any one knows download link please pass it here,

The link that I am trying is http://blogs.technet.com/error.htm?aspxerrorpath=/blogs/attachment.ashx

Regards

Shuja

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 25 Nov 2008 12:22:52 GMT

Shuja,

You should download the installer from http://connecttheworld.spaces.live.com.

Ajay

Team Networking

re: DHCP Server Callout DLL for MAC Address based filtering

Shuja — Tue, 25 Nov 2008 12:37:01 GMT

Dear Ajay,

Thank you very much, I really appreciate it, I need for windows 2003 32bit.

Regards

Shuja

re: DHCP Server Callout DLL for MAC Address based filtering

Shuja — Tue, 25 Nov 2008 12:40:35 GMT

Hi Ajay,

I found it thanks alot

Shuja

re: DHCP Server Callout DLL for MAC Address based filtering

Shuja — Tue, 25 Nov 2008 14:00:54 GMT

Hi,

I put in the mac file format as

#MAC_ACTION={ALLOW / DENY}

#001BXXXXXX

and I did change the path of MACList.txt in registry as guided in the document, but it didnt work, I am trying my best to fix it, if any one have any idea or can give me structure of file format.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 25 Nov 2008 15:04:31 GMT

Hey Shuja,

Any thing written after '#' is treated as comment. Use '#' only for comments.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Sheldon — Wed, 26 Nov 2008 00:25:23 GMT

I'm ready to try out this exciting tool! However I don't have a test lab so this will have to happen on our production server. Are there any possible problems that could mess up my DHCP services? What if I want to remove this in a hurry? Or can I just leave the text file blank and then everything continues running?

re: DHCP Server Callout DLL for MAC Address based filtering

Shuja — Wed, 26 Nov 2008 06:40:13 GMT

Hi Pandya,

I used without '#' as well, in error log says, action not correct and file format not proper I tried many ways but no success. may the MACList.txt I saved in the location system32\\MACList.txt is not correct?

Thanks

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 26 Nov 2008 07:46:48 GMT

Hey Sheldon,

You can disable the callout dll by setting the registry key HKLM\CCS\Services\DHCPServer\Parameters\CalloutEnabled to '0'.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 26 Nov 2008 07:50:08 GMT

Hey Shuja,

You can set the MAC_ACTION to either ALLOW or DENY. Make sure the MAC_ACTION text in the file is one of the below.

MAC_ACTION={ALLOW}

MAC_ACTION={DENY}

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Shuja — Wed, 26 Nov 2008 13:15:54 GMT

Hi Pandya,

I have done with MAC filtering, but when I add a node's MAC address then it dosent assign IP to that node, until I restart server, after server restarted it is ok,

I mean it automatically doesnt update the list?

Thanks

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 26 Nov 2008 15:23:08 GMT

Hey Shuja,

Good to hear that its working for you.

Yes, the server does need a restart once you modify the MACList.txt file.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Robert Vass — Thu, 27 Nov 2008 10:59:01 GMT

Dear Ajay!

Is it possible to use this tool with win2k3 standard edition?

I read about it in the readme, but it says (system requirements) to me no.

Gunter (tried it, comment: Friday, March 14, 2008 2:44 AM) but I don't read about the result.

Thanks

Wireless access points

David Hutton — Thu, 27 Nov 2008 13:59:12 GMT

Hi the mac address filtering runs fine until I try to access it through a wireless access point. If I set calloutdisabled to 0 then the client machine can get a dhcp addres but not if I enable the filtering. Any ideas.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 27 Nov 2008 21:34:50 GMT

It can be used with Windows 2003 Standard.

Ajay

Team Networking

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 28 Nov 2008 15:44:39 GMT

Hi david ,

Make sure your configurations are correct with regards to the MAC addresses. And also check if the "chaddr" filed in DISCOVER packet has the client's MAC address.

regards

Tushar

re: DHCP Server Callout DLL for MAC Address based filtering

David Hutton — Fri, 28 Nov 2008 18:27:27 GMT

The config seems to be OK and in the infolog file I am getting

Action specified is : ALLOW

Successfully read mac addresses

The DHCP server has successfully started.

Thu Nov 27 11:42:09 2008 0018de0b0a21 Deny

Thu Nov 27 11:42:12 2008 0018de0b0a21 Deny

Thu Nov 27 11:42:20 2008 0018de0b0a21 Deny

etc

which is the coorect mac address for the wireless connection but I get

Thu Nov 27 12:03:45 2008 000b6c37bcf1 Allow

if I connect the lan card

hope you can help Dave

but this is only if it is coming through

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 28 Nov 2008 21:47:56 GMT

Hey David,

I am not quite clear on the issue here.

You mean to say that "0018de0b0a21" is the MAC address of the wireless interface and is getting denied and "000b6c37bcf1" is the MAC address of the lan card and is denied??

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

David Hutton — Wed, 03 Dec 2008 16:18:53 GMT

No the wireless card is the one that gets denied but the lan card gets allowed. It is only if the mac address is coming through the wireless that it gets denied. It recognises it but denies it. Dave

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 12 Dec 2008 17:15:25 GMT

David,

Your wireless card and lan card will have different mac addresses. In case you need to allow both you need to enter both the address in the maclist.txt with MAC_ACTION={ALLOW}

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

SurfMen — Fri, 19 Dec 2008 12:14:08 GMT

Inside the file MACList.txt you could make, and we recognize as permitted mac and mac denied

MAC_ACTION DENY = ()

MAC_ACTION ALLOW = ()

Greetings and hugs

re: DHCP Server Callout DLL for MAC Address based filtering

SurfMen — Fri, 19 Dec 2008 12:16:37 GMT

When you add a file to the mac MACList.txt only would have to stop the service dhcp it and start again?

Greetings and hugs

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 07 Jan 2009 20:50:18 GMT

Hey David,

Can you share the MACList.txt file contents?

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

David Hutton — Thu, 08 Jan 2009 14:57:40 GMT

Raunak, are you wanting a copy of the log file and MAClist? Dave

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 09 Jan 2009 07:44:36 GMT

Hey David,

I wanted to see the file format. Hence it would be sufficient if you could paste the MAC_ACTION line and the relevant mac addrresses here(the way they are used in the maclist file).

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 09 Jan 2009 07:48:11 GMT

Just for your information David, this feature (Link layer filtering) is included in Windows Server 2008 R2 Beta DHCP Server. :)

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

David Hutton — Fri, 09 Jan 2009 12:15:55 GMT

Here you go

MAC_ACTION={ALLOW}

0013a9d72021

00147C4F9DCE

Dave

re: DHCP Server Callout DLL for MAC Address based filtering

Gary — Fri, 16 Jan 2009 15:51:29 GMT

I've installed this callout on W2K3 Ent and act as DC.I can see 1033 on the eventviewer.after i restarted the dhcp service,the ip address that i put on maclist,was blocked by dhcp.however,after several attempted,that pc can finally get ip from dhcp server.

Fri Jan 16 19:44:46 2009 000c29fbdb21 Deny

Fri Jan 16 19:44:49 2009 0002b9c45480 Allow

Fri Jan 16 19:44:49 2009 000c29fbdb21 Deny

MAC_ACTION={DENY}

000c29fbdb21

i run this pc under VM.is it something to do with VM?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 19 Jan 2009 19:21:04 GMT

Hey Gary,

From the log file content you have pasted it doesn't look like that DHCP Server does assign the address to the blocked client.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Eric — Wed, 28 Jan 2009 10:02:57 GMT

I'm trying to decide if this tool can assist with this scenario.

We run an 80/20 split scope across two servers and want to statically assign a small range of ip's within each scope to certain devices with the same vendor MAC while still providing normal DHCP services to the rest of the devices. We have about 2000 devices and 200+ scopes so a MAC wildcard would be useful.

I was thinking of ip reservations but now am leaning toward a dedicated scope with an allow filter for the controlled devices while setting a deny filter on the normal scope.

will this even work? any suggestions?

re: DHCP Server Callout DLL for MAC Address based filtering

Bob Neuhardt — Wed, 28 Jan 2009 23:37:41 GMT

I am unable to look at the contents of MacFilterCalloutInfoLog.txt while the DHCP Server service is running. Is this appropriate behavior? It also looks like the file is overwritten every time the DHCP Server service is restarted.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 29 Jan 2009 07:59:33 GMT

Hey Bob,

You will be unable to look into the Information Log file when DHCP Server service is running. Also, its correct that currently the file is overwritten each time the service is restarted.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 29 Jan 2009 08:02:18 GMT

Hey Eric,

Unfortunately, the callout dll doesn't support scopelevel filtering. You will have to fallback on creating reservations.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Samuel — Sat, 31 Jan 2009 14:27:58 GMT

Hi,

How I put comments on MacList.txt?

Thanks

re: DHCP Server Callout DLL for MAC Address based filtering

Samuel — Sat, 31 Jan 2009 14:46:29 GMT

Hi, again

Which the latest version of MacFilterCallout.dll?

I'm using version 1.0.0.1

Thanks

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Sat, 31 Jan 2009 22:03:42 GMT

Hey Samuel,

The latest version of MacFilterCallout is present at http://connecttheworld.spaces.live.com/

Any thing after '#' in a line in MacList.txt is considered as comment.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

gallay — Wed, 04 Feb 2009 22:38:14 GMT

I like the idea behind the MAC Filtering, I just do not know if I want all the problems keeping up with PC moves in 25 locations across Florida. It would be nice to use DHCP as it is now aand then be able to use MAC Filtering to block a MAC that you do not want back on the network once you've grabbed their MAC. Can we do this, still give out IP by request and then block a MAC that you do not want.

Joel

MAC Filter Import Tool

Microsoft Windows DHCP Team Blog — Mon, 16 Feb 2009 17:02:02 GMT

Hello Everybody, Thanks for all those who tried the MacFilterCallout dll . As you all must have checked

re: DHCP Server Callout DLL for MAC Address based filtering

tg251A — Thu, 19 Feb 2009 21:53:42 GMT

In response to Joel's question it shoudl work that way using the "Deny" option. I just found this tool and we are about to test it that way, We have 15-20 sites and over 1300 computer/device objects in AD and it would work much better as we find rogue systems just add them to the list.

re: DHCP Server Callout DLL for MAC Address based filtering

Paul — Wed, 25 Feb 2009 18:22:17 GMT

I have a question about this tool, or anthing else that might help us. We have 100 Symbol / Motorola handheld computers that need to acquire a unique IP address based on MAC address and I was wondering if there was some way to do it with this tool and wildcards, since the first four segments of the MAC are identical. If not, is there anything that can be done with Vendor Class or User Class? Thanks.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 25 Feb 2009 18:36:10 GMT

Hey Paul,

In case your requirement is just to make sure that these devices get unique addres based on MAC address (by unique I assume same address each time), you should use Reservations for them.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Paul — Wed, 25 Feb 2009 18:40:10 GMT

Thanks Raunak, that is probably our final option. We need to insure they come out of a specific IP pool that is not routed the same as our primary IP pool.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 25 Feb 2009 21:39:15 GMT

Hey Paul,

I would be interested to know about your requirement/ scenario here.

Looks like your requirement is that these 100 devices get IP address from a subnet different than the normal DHCP clients.

Is "Vendor Based Address Assignment" is what you are looking for?

Raunak Pandya

re: DHCP Server Callout DLL for MAC address based filtering

James C — Tue, 03 Mar 2009 01:19:30 GMT

Hey teamdhcp,

thanks for the tool. Literally just in time to safe the day. We're implementing a lockdown on our network by using 3 groups. We want to allow office PC (small group) to the Internet and Datacenter. That will be group 1. There are people that VPN tunnel in, so we'll put them in group 2. Group 2 needs access to just the office. Group 3, guests and whatnot. They just have access to the Internet. Our current setting is going thru a pix. However, we want to try your tool since it seems less limiting than the Pix. Is this possible? if so, how would the Maclist.txt look like? Thanks for your help.

James

re: DHCP Server Callout DLL for MAC Address based filtering

olgab — Tue, 03 Mar 2009 09:48:10 GMT

Hello guys! Thanks really, it is very interesting. Someone has tested use on windows sbs server?

re: DHCP Server Callout DLL for MAC Address based filtering

olgab — Sat, 07 Mar 2009 18:44:51 GMT

installed today, everything works great!

Question:

to add a future just enter it in maclist and restart the dhcp or you must restart the server?

Thank you very much (win sbs 2003 server and 8 client).

re: DHCP Server Callout DLL for MAC Address based filtering

Scott A. — Thu, 19 Mar 2009 21:19:25 GMT

It also does not show the computers, that it is allowing even though they are not on the mac list, in DHCP - it's not showing a lease even though they have been given an IP.

I installed the software on 2 one works one doesn't

moseshull — Mon, 30 Mar 2009 16:53:55 GMT

I am not receiving any responses in the eventlog on the one that does not work except for the standard 1044. The one that works give me a 1033. I have check the registry in the parameters section for the DHCP service section on both machines an they match exactly. It is like the DHCP service is ignoring the callout hook.

re: DHCP Server Callout DLL for MAC Address based filtering

Ali Busaleh — Wed, 08 Apr 2009 14:26:37 GMT

when I try to install

(MacFilterCalloutInstaller-x86.msi)

it install ok but I cant see where it installed to use

and when I try to install

(MacFilterCalloutInstaller-x64.msi)

give this error mesage

"this installation packege is not supported by

this processor type

please contact your prospect vendor "

I use windows server 2003

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 09 Apr 2009 13:40:57 GMT

Hey Ali,

I guess you processor architecture is x86 hence you need to install the MacFilterCalloutInstaller-x86.msi package. Once installed, you will find the Setup document (SetupDHCPMacFilter.rtf) copied at %SystemRoot%\system32.

A sample MACList.txt file extracted at the location of the DHCP auditlog (which is %SystemRoot%\system32\Dhcp if default).

Thanks

Raunak Pandya

DHCP サーバーも着実に進化してます

Windows Server 使い倒し塾 — Tue, 14 Apr 2009 17:18:02 GMT

みなさん、こんにちは。Windows Server プリセールス担当の瀧本です。最近DHCP サーバーが話題になることが多くなってきています。地味な存在である DHCP サーバーがなぜ話題になるかと言うと

re: DHCP Server Callout DLL for MAC Address based filtering

pkesherwal — Tue, 05 May 2009 19:05:56 GMT

Hello

I have installed Macfilterdll on our DHCP serveron windows 2003 server standard. I have configured and updated the registry according the documnet. I have added the MAC address of few of the system and allowed them in the mac.txt file. When I have restarted the DHCP service than the systems were not getting the IPs from the DHCP server. In the log file I was getting the error deny.

Also the entry of MAC address in mac.txt file is case sensitive?

Kindly suggest???

Thanks

Pankaj

re: DHCP Server Callout DLL for MAC Address based filtering

Joe — Wed, 06 May 2009 21:36:26 GMT

i have one client that has been added to the list but the log on the DC keeps saying deny. Their mac is correct.

Any other places i can look to see why it's not connecting?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 06 May 2009 22:03:51 GMT

Hey Joe,

Are you using the most updated version of the callout? Can you share the content of maclist.txt and log files here.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 06 May 2009 22:07:35 GMT

Hwey Pankaj,

It doesnt seem like you are using the latest version of the callout dll. You dont need to do any registry configurations once you unpack the latest msi. Also the entries in maclist.txt were case sensitive in earlier release but has been fixed in the latest one.

I would recommend you to try out the latest version once.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Joe — Wed, 06 May 2009 22:09:41 GMT

not sure of the version we're using. It's been in place for a while. We were using it as DENY but today i moved everything to ALLOW (only).

Here is part of the infolog

Action specified is : ALLOW

Successfully read mac addresses

The DHCP server has successfully started.

Wed May 06 14:27:06 2009 08000f390c05 Deny

Wed May 06 14:27:16 2009 001b2450045f Deny

Wed May 06 14:27:19 2009 001b2450045f Deny

Wed May 06 14:27:22 2009 08000f390c05 Deny

Wed May 06 14:27:27 2009 001b2450045f Deny

Wed May 06 14:27:42 2009 001b2450045f Deny

Wed May 06 14:27:53 2009 08000f390c05 Deny

Wed May 06 14:28:44 2009 08000f390c05 Deny

Wed May 06 14:28:51 2009 08000f390c05 Deny

Wed May 06 14:29:07 2009 08000f390c05 Deny

Wed May 06 14:29:38 2009 08000f390c05 Deny

Wed May 06 14:29:53 2009 08000f390c05 Deny

Wed May 06 14:30:01 2009 08000f390c05 Deny

Wed May 06 14:30:09 2009 00197e948d01 Deny

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 07 May 2009 08:26:35 GMT

Hey Joe,

This could probably be because in earlier versions there were some issues in specifying MAC address in uppercase. Just make sure the mac address provided is in lower case.

This problem is solved in the latest release.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Joe — Thu, 07 May 2009 13:04:46 GMT

Thank you Raunak.

I did upgrade to the newest version. It definitely worked after that.

Much appreciated!

DHCP Server Callout DLL for MAC Address based filtering

pkesherwal — Fri, 08 May 2009 12:55:21 GMT

Dear Raunak

Thanks for your suggestion. I have resolve the issue. It was due to case sensitive. Now it is working fine.

If I will install the new package what seetings I need to perform?

Thanks

Pankaj

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 08 May 2009 15:59:50 GMT

Hey Pankaj,

Good to hear that your issue was resolved. The new versionhas few improvemnets going in. Support for case insensitive Maclist.txt being one of them.

Also, the installation is very simple now with no need to touch registry manually.

You can find the complete list of improvements in the blog above..

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

pkesherwal — Wed, 13 May 2009 07:28:01 GMT

Thanks Raunak......

Pankaj

Windows Server 2008 R2 : DHCP Mac address Filtering

Oks with IT — Mon, 18 May 2009 08:25:05 GMT

정책기반 보안 인프라를 만들면서 기업에서 필요로 하는 DHCP Mac address Filtering 기능이 Windows Server 2008 R2 의 DHCP 서버에서는 내장 되어있습니다

re: DHCP Server Callout DLL for MAC Address based filtering

fizzlepop — Mon, 18 May 2009 22:21:41 GMT

This is cool but how do I write the filter to give all xbox360's with a MAC address vendor prefix of 00-17 on to a specific scope. Eg: general population is on 192.168.50.x/24, Xbox's should go to 192.168.51.x/24

Thanks much for your help.

Fizz

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 20 May 2009 07:50:05 GMT

The MAC based filtering will cannot specify the scope from which a particular MAC request can get the address. It can only allow/deny a MAC based address acquisition.

regards

Tushar

System Requirements

Arthurafs — Thu, 21 May 2009 16:28:42 GMT

Hello guys,

Do you know if this tool works on Windows 2003 Standard Server or others versions? The system requirement on documentation (SetupDHCPMacFilter.rtf) is Windows 2003 Enterprise Server or higher.

Thanks in advance,

Arthur Fernandes.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 21 May 2009 16:36:11 GMT

Hey Arthur,

The callout dll works on W2K3 Server Standard Edition as well.

Thanks

Raunak Pandya

DHCP Server Team

re: DHCP Server Callout DLL for MAC Address based filtering

Derek — Wed, 27 May 2009 18:06:59 GMT

I have two DHCP servers, each having different scopes. I am focusing on one particular scope, and have created reservations for all approved machines within that scope. I want to be able to take this further and allow only the MAC addresses for these machines, to get an address from within that scope. As in, if a rogue laptop or device connects to our network, an address will not be provided.

The problem with how I understand this, is that the process will impact all my scopes, and I do not want to do that for various reasons (our phones are VOIP and are set to DHCP, for example).

Can I have this process apply to just one scope within the DHCP server, ignoring other scopes?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 28 May 2009 07:41:10 GMT

MAC based filtering applies to all the scopes configured on the DHCP Server. It won't be possible to apply scope level filters.

re: DHCP Server Callout DLL for MAC Address based filtering

Mike — Mon, 08 Jun 2009 13:07:15 GMT

Hi,

Is there any way to turn off the Info log file, so this information isn't logged any more? We have a lot of activity on our DHCP servers, and the file is growing by 7MB a day, which we can't maintain for long.

I've tried deleting the path in the CalloutInfoLogFile registry key, as well as deleting the key completely, but the DHCP service then refuses to start (throwing up an error 1032 in the event viewer)

Thanks,

Mike

re: DHCP Server Callout DLL for MAC Address based filtering

Jim Dunham — Fri, 19 Jun 2009 09:56:42 GMT

Will the DHCP callout DLL work on SBS2003 as well?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 22 Jun 2009 11:39:18 GMT

Hello Mike,

Deleting the InfoLog registry key (CalloutInfoLogFile) should work. However, from your reply, I see that you tried that and it failed. Can you confirm that once again? What OS are you using? Also, I would recommend you to work with the latest version of the callout dll posted on the blog above.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 22 Jun 2009 11:41:40 GMT

Hey Jim,

It should be working on SBS 2003 as well. Olgam's comment above confirms that as well.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Gop's — Thu, 25 Jun 2009 16:32:05 GMT

I have installed th msi and even see the event 1033. i found the 3 txt files

MacFilterCalloutErrorLog

MacFilterCalloutInfoLog

MACList

C:\windows\system32\dhcp

i have this error "Line Number 2 Not In Proper Format

File format not proper" in MacFilterCalloutErrorLog.txt

can you let me know why? and

i have only this in MACList.txt

MAC_ACTION={ALLOW}

00-0d-0c-4a-67-23

but i can see lot of MAC's allowed.

Thanks in advance.

Gop's

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 25 Jun 2009 16:52:17 GMT

Hello Gop's

Please key in the MAC addresses in the txt file without hyphens '-'. It should work for you. You shouldn't b seeing any error after that.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Andre Watson — Tue, 07 Jul 2009 18:35:52 GMT

ALL YOU NEED , Works great, especially on my remote network. Being unable to be everywhere, in combination with a little script to monitor the logs, sends me and other administrators real time pop up message when access is denied.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Wed, 15 Jul 2009 07:37:36 GMT

Hey Allan,

This callout cannot prevent machines to come onto the network if they are configured with static IP and correct gateway address.

This is actually not a limitation of this callout dll but unfortunately DHCP protocol itself is like this.

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Igor Sharapov — Wed, 29 Jul 2009 03:15:16 GMT

I am running Windows 2003 R2 x64 server. When I try to run MacFilterCalloutInstaller-x64.msi, I get error "Proccessor Architecture not Supported." MacFilterCalloutInstaller-x32.msi terminates with the same error. Is there anything I need to do, to install this dll?

re: DHCP Server Callout DLL for MAC Address based filtering

Joe Tenne — Wed, 12 Aug 2009 04:46:15 GMT

I have applied this solution to allow for specific mac addresses in the maclist.txt file. However, although the log file shows that it is definitely allowing my designated mac addresses to receive IP addresses, when I look at the DHCP management console, nothing is listed under DHCP leases. Is this a known issue? How can I get the currently leased IP addresses to show up in the DHCP console?

Thanks in advance for your help!

Joe

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 13 Aug 2009 07:29:09 GMT

Hey Joe,

If the Callout is allowing DHCP requests and DHCP server is leasing IP address to the client, one should see the lease under the Address Leases node in MMC. I would like you to re check the configuration once. If the client is still holding the lease, you should see the lease in DHCP management console under the Address Leases node in the repective scope node.

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

warlock88 — Thu, 03 Sep 2009 14:15:55 GMT

hi...i've noticed that every time i restarted the dhcp server under services...the logs on MacFilterCalloutInfoLog has been deleted...is there a way to restart the dhcp service without deleting the MacFilterCalloutInfoLog logs?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 03 Sep 2009 15:49:45 GMT

Hello warlock88,

I am afraid this is not possible. You will manually have to keep a copy of the log file before starting the DHCP server service after stopping.

Raunak

re: DHCP Server Callout DLL for MAC Address based filtering

Yogurtu92 — Thu, 03 Sep 2009 22:34:37 GMT

I installed it and it erase my DHCP Server Configuration. Is this normal? Is there a way to restore it?

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 04 Sep 2009 07:49:02 GMT

Installing this callout dll cannot be the reason for your configuration gotten erased. However, if automatic backup config is still there, you can restore it from there.

Command: netsh dhcp server databaserestoreflag 1

Restart DHCP Server service.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Chris Roser — Fri, 04 Sep 2009 13:13:57 GMT

After installing the new version I'm not able to open the CalloutInfoLogFile while dhcpserver is running. Is this an intented behaviour?

Additional info: I changed the path to info.log in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters\CalloutInfoLogFile to d:\info.log

PS: MacFilterCallout.dll works here as well with a localized w2k3 r2 (german)

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Sat, 05 Sep 2009 08:23:17 GMT

Hello Chris,

Yes, in the latest verison of the callout dll you can open the log file even when the server is running to get a live view of the addresses being allowed and denied.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

warlock88 — Thu, 10 Sep 2009 09:30:32 GMT

hi, is there a way where i can deny IP address?...say, a client statically configured IP address on his machine and this IP belongs to the IP address range for distribution of our DHCP server.

My objective is that to prevent this clients or users for gaining access to our network even they statically assigned their own IP address.

re: DHCP Server Callout DLL for MAC Address based filtering

Victor — Thu, 17 Sep 2009 10:43:39 GMT

Raunak,

First - many thanks for this useful tool. I fear some commenters have neglect this obvious acknowledgement in their rush to ask for more features.

The use of {DENY} with curly brackets wasn't clear but reading the above sorted that out. I note that the log file now has an opening lines:

Action specified is : DENY

Successfully read mac addresses

The DHCP server has successfully started.

so it's clear that the config file is read and understood.

Pardon me if I'm being too simplistic but could both ALLOW and DENY features be possible by something like this:

- two copies of the same DLL (or very nearly the same DLL)

- the only difference is a separate set of registry entries so that the config and log files have different name or locations.

Then users could have two config files one for Allow and another for Deny that are used by two separate but identical DLL's?

Not an elegant solution but I thought it might be easy for you to implement without a lot of changes to the existing DLL.

Just a suggestion.

Again, thanks,

Victor

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 17 Sep 2009 11:06:44 GMT

Thanks Victor for your acknowledgement. Unfortunately this callout can either be run in Action or Deny mode only and not both.

The feature request you making is already there in the latest WS08R2 DHCP Server.

Check out the blog http://blogs.technet.com/teamdhcp/archive/2009/01/21/link-layer-based-filtering.aspx

Raunak

re: DHCP Server Callout DLL for MAC Address based filtering

Yves — Mon, 28 Sep 2009 12:01:45 GMT

Hello,

I've used Routing and Remote Access to create a NAT server on a Win2k3 server.

As far as I can see from the wizards, it uses it own DHCP allocator to provide IPs to my private network. Is there a way to make that DHCP service (which is not a standard DHCP server role) use the callout dll?

My attempts to install the callout dll failed at first because it seems to require a DHCP server role, something I don't really need in this situation. I did install the roll to be able to run the callout installer, but it doesn't seem to work together with the NAT server.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Tue, 29 Sep 2009 07:44:40 GMT

No, the NAT is a part of RRAS. DHCP server is not used in this scenario.

Also the DHCP callout dll is supported by the DHCP server but not by the RRAS.

-Tushar

re: DHCP Server Callout DLL for MAC Address based filtering

möp — Tue, 29 Sep 2009 17:54:40 GMT

Hello,

is it possible to reload the DLL only. After the MACList.txt was changed? Or exists another MacFilter for DHCP server?

Thanks,

re: DHCP Server Callout DLL for MAC Address based filtering

Dave — Wed, 14 Oct 2009 07:20:35 GMT

Hi there,

Please can someone tell me what the effect stopping and starting the DHCP server will have on locally attached clients. Will they remain connected to the network and be able to function normally for the brief time the service is down or will they cease to connect while the service is down and then reconnect once it is back up again. I am a junior network engineer and work in an organisation that realistically has people connected to the network 24 hours a day. (I was trying to avoid coming into work at the weekend just to test this DLL)

Thanks for you help in advance

Dave

re: DHCP Server Callout DLL for MAC Address based filtering

Elton Andrade — Wed, 14 Oct 2009 15:48:30 GMT

I'm concerned about the Vista clients.

I saw people complaining that their Vista clients don't get IP.

I'm working on a virtualized environment, and I'm pretty happy with the results, works like a charm...but I don't have a Vista VM to continue with tests.

Can Vista/Win7 clients get an IP address from the DHCP server (with callout dll)?

Thanks,

re: DHCP Server Callout DLL for MAC Address based filtering

Giancarlo Stanco — Fri, 16 Oct 2009 12:49:22 GMT

Hi Pandya,

Can Be installed the DLL on windows 2003 server in Spanish.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 19 Oct 2009 07:30:51 GMT

Hello Elton,

This tool should work with vista clients as well without any issue.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 19 Oct 2009 10:11:37 GMT

Hello Dave,

Stopping and starting the DHCP server service, will not effect any of the existing DHCP clients which have already acquired an IP address earlier. Only clients coming onto the network at the time DHCP server is getting restarted will get affected. However, with the retry logic built into DHCP clients, clients should eventually acquire the IP address (few seconds later) as the server timeout in your case is also going to be just few seconds.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Mon, 19 Oct 2009 10:14:04 GMT

Hello Giancarlo,

This tool is not tested on non-English verison of OS and hence may not work. You may still give a shot at it. Do share your observation.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Tom Komadowski — Thu, 22 Oct 2009 15:30:11 GMT

Has any work been done to add wildcards to the callout?

My scenario: We have VPN clients coming in to the network that use DHCP to get their IP address.

Right now I have to set up static routes on a layer 3 switch to each address as it's assigned so they can see all the subnets within our network.

I'd like to have 2 DHCP servers set up so that I can assign the VPN clients addresses from a specific range and the other DHCP server assigns to the rest of the network.

The VPN clients all start with the same 6 digits in the MAC address so that would make it easy to do the ALLOW and DENY on the DHCP servers with a wildcard in the callout DLL.

If I can't do the wildcard then my question is how do I specify a DHCP server to respond slower so that the main DHCP server can answer first? I am able to direct the VPN clients to the specific DHCP server but I don't want that one answering other requests on the network.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Thu, 22 Oct 2009 16:30:46 GMT

Hello Tom,

Windows Server 2008 R2 has a new feature Link Layer Filtering, which has wildcard support as well (http://technet.microsoft.com/en-us/library/dd759259.aspx). You may want to check that out.

On the other hand, if the address requested by VPN server for VPN clients belong to a specific user (or vendor) class, you may want to check out Option based callout dll (http://blogs.technet.com/teamdhcp/archive/2007/10/03/dhcp-server-callout-dll-for-mac-address-based-filtering.aspx). In this case, you would just need one DHCP server serving VPN clients and other clients from different subnets.

If you are looking for the delay option in responding, another good news is that you can configure subnet delay in WS08 R2 to respond with some delay on secondary server to let the primary answer first.

Thanks

Raunak Pandya

re: DHCP Server Callout DLL for MAC Address based filtering

Tom Komadowski — Fri, 23 Oct 2009 17:20:16 GMT

Thanks for the response, Raunak.

Unfortunately I am stuck with Windows Server 2003 for now.

I am going to look into the Option based callout dll though.

Thanks!

re: DHCP Server Callout DLL for MAC Address based filtering

Tom Komadowski — Fri, 23 Oct 2009 17:34:05 GMT

Raunak, I just realized you pointed me back to the exact callout dll I was working with.

The VPN clients are all from the same vendor and their MAC addresses start with the same 6 digits. My problem is that without wildcards I would have to create over a million entries in the text file to cover all possible MAC addresses in that range. The remaining 6 digits of the MAC address are randomly created when the VPN link is established.

That is why I would REALLY like to have wildcard support in the callout DLL. It would take care of my problems immediately.

re: DHCP Server Callout DLL for MAC Address based filtering

teamdhcp — Fri, 23 Oct 2009 18:12:47 GMT

Hello Tom,

I am sorry. I pointed you to incorrect link. Option based callout dll is @ the location http://blogs.technet.com/teamdhcp/archive/2009/06/12/option-based-ip-address-assignment-callout-dll.aspx

However, I am not sure of the structure of your network. See if you can make use of the user/ vendor class option in VPN clients.

Raunak Pandya