The problem is that the kernel accepts all ARP-replies it receives. So if somebody sends to me wrong ARP-replies for all network neighbourghood, my box will be really broken. I couldn't make any connection until reloading network interface. In fact, ARP-reply should be accepted only after ARP-request. Kernel version: Linux version 2.4.20-alt7-up (ldv@skif.office.altlinux.ru) (gcc version 2.96 20000731 (ALT Linux, build 2.96-alt3)) #1 Fri Mar 14 14:57:05 MSK 2003, but it seems the same on all earlier versions. -- Roman Klochkov AKA ***Monk*** - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html