Subject: arp addresses, hostname faking
To: None <current-users@NetBSD.ORG>
From: Andrew Wheadon <andrew@wipux2.wifo.uni-mannheim.de>
List: current-users
Date: 07/20/1995 10:46:36
How can I have entrys in /etc/exports for a specific
host and make it impossible for another host to fake
it's address:
i.e.
/etc/exports.on.wipux2
/src3 -alldirs -maproot=nobody 134.155.59.62
I then added the arp-address of 134.155.59.62 to /etc/arp.n
/etc/arp.n.on.wipux2
134.155.59.62 00:00:c0:bf:43:af
and run
arp -f /etc/arp.n
but when I take a different machine and put
134.155.59.62
in it's /etc/hostname.ed0.on.bad.machine, then all I get on the wipux2
arp info overwritten for 869b3b3e by 00:00:c0:bf:43:a0
Is there a way to make NetBSD not accept changes to
the arp table ? Or is there a better way to make it
secure against spoofing the ip-address.
Cheerio
--
The cost of living hasn't affected it's popularity. (unknown)
current release=doc host=wipux2.wifo.uni-mannheim.de \ "NetBSD-current mirror"
hostbase=/mit/ftp/pub/NetBSD base=/usr prefix=/usr backup delete use-rel-suffix