All of lore.kernel.org
 help / color / mirror / Atom feed
From: Chris Schanzle <nospam@nist.gov>
To: netfilter@lists.netfilter.org
Cc: schanzle@nist.gov
Subject: How to drop arps when protocol addrs of sender = target
Date: Wed, 10 Sep 2003 13:04:10 -0400	[thread overview]
Message-ID: <3F5F598A.3080609@nist.gov> (raw)

I have a need to not respond to arps where the protocol address of the 
sender is the same as the target, which is the case when Windows clients 
try to ARP for the manually-configured address it is about to use.  If 
it gets a response, it disables the interface.  I currently respond 
because of a global arp entry ("arp ... -s ... netmask 0.0.0.0 pub"), 
which is required for my application.

I want to receive and respond to all other ARPs (e.g., for routers).

I cannot change the Windows clients.

It does not appear to me this can be done with iptables or arptables 
(comparisons between two fields in the packet).  Any suggestions before 
I start hacking on kernel code?

Thanks,

Chris Schanzle
[yes, the nospam *does* go to me.  :-]




             reply	other threads:[~2003-09-10 17:04 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-09-10 17:04 Chris Schanzle [this message]
2003-09-11 12:14 ` How to drop arps when protocol addrs of sender = target Cedric Blancher

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3F5F598A.3080609@nist.gov \
    --to=nospam@nist.gov \
    --cc=netfilter@lists.netfilter.org \
    --cc=schanzle@nist.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.