Hey Paul, you asked earlier about ARP spoofing and detecting it
Here is a good URL to read http://www.watchguard.com/infocenter/editorial/135324.aspThere you will read how people prevent it. As you can see, it's sort of the nature of the beast when it comes to networks. (ARP, like SMTP, is very trusting, and people take advantage of that trusting nature for nefarious purposes)
HTH
