Roman, # echo 1 > /proc/sys/net/ipv4/conf/all/hidden # echo 1 > /proc/sys/net/ipv4/conf/eth1/hidden # echo 1 > /proc/sys/net/ipv4/conf/eth2/hidden If you don't have support for hidden in your kernel, visit Julian's page: http://www.linux-vs.org/~julian/ http://www.linux-vs.org/~julian/#hidden This will prevent ethernet interfaces from responding for ARP for IPs active on other devices. Good luck, -Martin : and when I ping from pc2 -> PC1:eth2, : using tcpdump i see that PC1 : send reply to (arp who has 10.0.0.2), : 10.0.0.2 is at .....eth1. : why PC1 send back not proper HW address? : how I can force PC1 to say that 10.0.0.2 : is at eth2? : : : : thanks in advance! : : : : : : _______________________________________________ : LARTC mailing list / LARTC@mailman.ds9a.nl : http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ : -- Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/