Hello, I'm not sure if this is a problem or a way it's supposed to be. I'm using mapping of ip and mac address, to protect against address spoofing (yes, it's not perfect). Kernel version is 2.4.29. Mapping is done using "arp -s <ip> <mac>". When a packet with a different mac address (than in mapping) is received, I expect it to be discarded, but it is not. So my questions are: Is this supposed to be that way? If yes - why? Is there any way to tell kernel to ignore such packets, without using arptables/ebtables/iptables? -- Vytautas - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html