ARP Spoofing

Pieter de Boer pieter at thedarkside.nl
Sun Sep 3 08:56:56 PDT 2006


Maslan wrote:

> I was trying to find a solution to ARP Spoofing on my local network,
> i've tried to use IPSTEALTH option, but this didn't help.
> Is there is any solution for preventing the ARP Spoofing inside the
> kernel such as in the tcp/ip layer or in the ethernet driver itself.
> i'm sorry if its not the correct mailinglist.
You can use static arp entries on all the involved hosts/routers, to 
hardwire a MAC-address to an IP-address. This can be done with 'arp -s 
<ip address> <mac address>' on FreeBSD. Such static arp entries will not 
be overridden by incoming arp replies and will ensure that outgoing IP 
packets are sent to the right mac address.

-- 
Pieter



More information about the freebsd-hackers mailing list