ARP Spoofing
Pieter de Boer
pieter at thedarkside.nl
Sun Sep 3 08:56:56 PDT 2006
Maslan wrote:
> I was trying to find a solution to ARP Spoofing on my local network,
> i've tried to use IPSTEALTH option, but this didn't help.
> Is there is any solution for preventing the ARP Spoofing inside the
> kernel such as in the tcp/ip layer or in the ethernet driver itself.
> i'm sorry if its not the correct mailinglist.
You can use static arp entries on all the involved hosts/routers, to
hardwire a MAC-address to an IP-address. This can be done with 'arp -s
<ip address> <mac address>' on FreeBSD. Such static arp entries will not
be overridden by incoming arp replies and will ensure that outgoing IP
packets are sent to the right mac address.
--
Pieter
More information about the freebsd-hackers
mailing list