From owner-freebsd-isp Mon Sep 6 11:52:52 1999 Delivered-To: freebsd-isp@freebsd.org Received: from leo.webcorp.com.pl (leo.webcorp.com.pl [195.116.39.10]) by hub.freebsd.org (Postfix) with ESMTP id 2381215372 for ; Mon, 6 Sep 1999 11:52:37 -0700 (PDT) (envelope-from bsiebab@rubikon.net.pl) Received: from stonehenge (pa200.przemysl.ppp.tpnet.pl [212.160.5.200]) by leo.webcorp.com.pl (8.9.3/8.9.1) with SMTP id UAA07643 for ; Mon, 6 Sep 1999 20:17:06 +0200 Message-ID: <001201bef890$f98e8a80$c805a0d4@stonehenge> From: "Bartek Siebab" To: "FreeBSD ISP" Subject: Really static arp? Date: Mon, 6 Sep 1999 19:53:38 +0200 Organization: $ MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2417.2000 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! I have many malicious users in my LAN. Many of them has access disabled to our certain services, but if they change their ip adress we can't filter them by ip. User can change ip but his MAC adress is static, but arp -S isn't solution, because when user has new ip arp add it to cache and after arp -a we have a few entry for ip with a few MAC adresses, so trafic is passed from this ip (currently and temporary not used by other user)! How to disable arp from do this? How to set up arp table really static? Maybe is there any solutions for ipfw based on MAC? -- Bartek Siebab bs@vt.pl bsiebab@rubikon.net.pl To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message