From: Thornton Prime <theoszi@gmail.com>
To: Luca Ferrari <fluca1978@infinito.it>
Cc: linux-admin@vger.kernel.org
Subject: Re: arp poisoning?
Date: Thu, 10 Feb 2005 06:58:35 -0800 [thread overview]
Message-ID: <2d7eccf505021006582451eebd@mail.gmail.com> (raw)
In-Reply-To: <200502101319.51807.fluca1978@infinito.it>
On Thu, 10 Feb 2005 13:19:51 +0100, Luca Ferrari <fluca1978@infinito.it> wrote:
> in my internal network someone is using a kind of arp poisoning, since two (or
> more) computers results _sometimes_ associated to the same MAC address. Since
> I've got a linux firewall-proxy (iptables and squid) that limits the traffic
> depending on the mac address, this is a problem for me. Is there a solution
> to solve the problem?
Someone else mentioned ip-sentinel. Arpwatch is also a useful tool.
If this is on your internal network, you are best off tracing down
which devices are conflicting and figuring out if this is intentional
or some sort of bug. Someone capable of arp poisoning on your internal
network might have done a lot more than suck bandwidth -- they can
launch a number of man-in-the-middle attacks.
thornton
prev parent reply other threads:[~2005-02-10 14:58 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-02-10 12:19 arp poisoning? Luca Ferrari
2005-02-10 12:45 ` Adrian C.
2005-02-10 14:58 ` Thornton Prime [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2d7eccf505021006582451eebd@mail.gmail.com \
--to=theoszi@gmail.com \
--cc=fluca1978@infinito.it \
--cc=linux-admin@vger.kernel.org \
--cc=thornton@yoyoweb.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).