is it possible to turn off automatic adding any new entries to kernel arp
table, so only entries added with arp(8) will be used and everything else
will be simply ignored?

now i just fill all unused IP addresses on subnet with random MACs and it
works fine, but it isn't very elegant, and it is not possible for IPv6 to
fill 2^64 entries