"Miroslav Kubik" <[EMAIL PROTECTED]> writes:

> Hello
> 
> In our intranet is an attacker who flooding OpenBSD router by ARP requests. 
> Due to this we have trouble with internet connection. Is there a way how to 
> protect server against ARP poisoning attack?

Excuse me? You have an attacker inside your intranet?

The best way to protect against that kind of attack is a baseball bat.
Or security guards who show the person where the door is and a lawyer
who hands over the lawsuit.

This is a social problem, don't solve it with a technical solution.

//art

> messages in /var/log/messages
> 
> Aug  6 23:33:53 host22 /bsd: arp info overwritten for 192.168.1.249 by 
> 00:e0:98:be:d3:cd on rl0
> Aug  6 23:33:53 host22 /bsd: arp info overwritten for 192.168.1.246 by 
> 00:e0:98:c5:8b:b9 on rl0
> Aug  6 23:33:53 host22 /bsd: arp info overwritten for 192.168.1.245 by 
> 00:e0:98:c5:9b:c5 on rl0
> Aug  6 23:33:53 host22 /bsd: arp info overwritten for 192.168.1.242 by 
> 00:e0:98:c5:8b:b9 on rl0
> and still continue
> ........
> 
> 
> S pozdravem / Best Regards
> Miroslav Kubik
> IT Specialist
> Enterprise Server Farms

Reply via email to