From owner-freebsd-net@FreeBSD.ORG  Wed Aug 10 13:48:59 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BF89A16A41F;
	Wed, 10 Aug 2005 13:48:59 +0000 (GMT)
	(envelope-from steve.langdon@mail.ru)
Received: from f31.mail.ru (f31.mail.ru [194.67.57.70])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6467F43D46;
	Wed, 10 Aug 2005 13:48:59 +0000 (GMT)
	(envelope-from steve.langdon@mail.ru)
Received: from mail by f31.mail.ru with local 
	id 1E2qwz-0005um-00; Wed, 10 Aug 2005 17:48:57 +0400
Received: from [195.14.57.50] by win.mail.ru with HTTP;
	Wed, 10 Aug 2005 17:48:57 +0400
From: Steve Langdon <steve.langdon@mail.ru>
To: Sten Daniel S=?koi8-r?Q?=F8?=rsdal <lists@wm-access.no>
Mime-Version: 1.0
X-Mailer: mPOP Web-Mail 2.19
X-Originating-IP: [195.14.57.50]
Date: Wed, 10 Aug 2005 17:48:57 +0400
In-Reply-To: <42FA0295.1030503@wm-access.no>
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 8bit
Message-Id: <E1E2qwz-0005um-00.steve-langdon-mail-ru@f31.mail.ru>
Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org
Subject: Re[2]: Stranges with ARP
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Steve Langdon <steve.langdon@mail.ru>
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Aug 2005 13:48:59 -0000

Sten, thanks for helping me.

Another question: ``route -blackhole' is the same thing like ``arp -S [IP] 00:00:00:00:00'? So packet will ignore on router. Or not?

-----Original Message-----
From: Sten Daniel Sørsdal <lists@wm-access.no>
To: Steve Langdon <steve.langdon@mail.ru>
Date: Wed, 10 Aug 2005 15:35:17 +0200
Subject: Re: Stranges with ARP
[snip]
> Using static arp is a very VERY bad idea.
> Consider an flood attack against this IP. All packets will be sent to
> ALL clients and you would have a hard time tracking down the problem.
> 
> Just use -blackhole or firewall instead.