From owner-freebsd-questions Tue Dec 25 23:30:39 2001 Delivered-To: freebsd-questions@freebsd.org Received: from pintail.mail.pas.earthlink.net (pintail.mail.pas.earthlink.net [207.217.120.122]) by hub.freebsd.org (Postfix) with ESMTP id 6D99637B41E for ; Tue, 25 Dec 2001 23:30:36 -0800 (PST) Received: from dialup-209.244.107.126.dial1.sanjose1.level3.net ([209.244.107.126] helo=gohan.cjclark.org) by pintail.mail.pas.earthlink.net with esmtp (Exim 3.33 #1) id 16J8Vv-0004iT-00; Tue, 25 Dec 2001 23:30:25 -0800 Received: (from cjc@localhost) by gohan.cjclark.org (8.11.6/8.11.1) id fBPKM8X00305; Tue, 25 Dec 2001 15:22:08 -0500 (EST) (envelope-from cjc) Date: Tue, 25 Dec 2001 15:22:08 -0500 From: "Crist J. Clark" To: "Oles' Hnatkevych" Cc: freebsd-questions@FreeBSD.ORG Subject: Re: arp, firewall, etc Message-ID: <20011225152208.B136@gohan.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <02901731.20011224094945@fc.kiev.ua> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <02901731.20011224094945@fc.kiev.ua>; from gnut@fc.kiev.ua on Mon, Dec 24, 2001 at 09:49:45AM +0300 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Dec 24, 2001 at 09:49:45AM +0300, Oles' Hnatkevych wrote: > Hello freebsd-questions, > > how do I prevent users from setting IP address > manually so they can not use another one's IP > address. > > my first thought was to set permanent entries > in ARP table Then just use the other MAC address too. > is there any other way to cope with that? Only accept packets from IP address a.b.c.d on the wire that is connected to the machine a.b.c.d. -- "It's always funny until someone gets hurt. Then it's hilarious." Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message