Subject: arp addresses, hostname faking
To: None <current-users@NetBSD.ORG>
From: Andrew Wheadon <andrew@wipux2.wifo.uni-mannheim.de>
List: current-users
Date: 07/20/1995 10:46:36
How can I have entrys in /etc/exports for a specific
host and make it impossible for another host to fake
it's address:
i.e.
/etc/exports.on.wipux2
	/src3	-alldirs -maproot=nobody 134.155.59.62

I then added the arp-address of 134.155.59.62 to /etc/arp.n
/etc/arp.n.on.wipux2
	134.155.59.62	00:00:c0:bf:43:af
and run
	arp -f /etc/arp.n
but when I take a different machine and put
	134.155.59.62
in it's /etc/hostname.ed0.on.bad.machine, then all I get on the wipux2
	arp info overwritten for 869b3b3e by 00:00:c0:bf:43:a0

Is there a way to make NetBSD not accept changes to
the arp table ? Or is there a better way to make it 
secure against spoofing the ip-address.

Cheerio

-- 
The cost of living hasn't affected it's popularity. (unknown)
current	release=doc host=wipux2.wifo.uni-mannheim.de \ "NetBSD-current mirror"
hostbase=/mit/ftp/pub/NetBSD base=/usr prefix=/usr backup delete use-rel-suffix