Filtering packets where source mac address does not match ip-mac mapping

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

I'm not sure if this is a problem or a way it's supposed to be. I'm
using mapping of ip and mac address, to protect against address spoofing
(yes, it's not perfect). Kernel version is 2.4.29. Mapping is done using
"arp -s <ip> <mac>". When a packet with a different mac address (than in
mapping) is received, I expect it to be discarded, but it is not. So my
questions are:

Is this supposed to be that way?
If yes - why?
Is there any way to tell kernel to ignore such packets, without using
arptables/ebtables/iptables?

-- 
Vytautas
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux