fake MAC addresses and ARP
Bruce M. Simpson
bms at incunabulum.net
Wed Apr 18 18:50:24 UTC 2007
Some ideas:
1. Enable IFF_STATICARP on your interface to stop ARP sending out to
resolve the IP/MAC address tuple.
2. Consider that you can deal with resolution in userland (RTF_RESOLVE)
but this involves changing the net's entry (route) in the FTE. You'd
then process RTM_RESOLVE messages and install routes yourself -- it's
possible to do arp in userland with this.
3. Try to avoid using the 169.254.0.0/16 prefix as it has a specific
meaning. We don't implement interface scoping for these addresses yet so
the FTE can't deal with them appearing more than once for the same
subnet; it may be easier to pick something else -- note that if ARP is
enabled for an interface with one of these addresses, all ARP traffic is
forced to be broadcast as per the zeroconf RFCs.
BMS
More information about the freebsd-net
mailing list