LinuxQuestions.org
Support LQ: Use code LQCO20 and save 20% on CrossOver Office
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
LinkBack Search this Thread
Old 10-11-2006, 09:16 PM   #1
CN_jianzi
LQ Newbie
 
Registered: Feb 2006
Posts: 5

Rep: Reputation: 0
How can prevent arp attack??


if has a tool or command in linux to prevent arp attack????
 
Old 10-12-2006, 12:14 AM   #2
fozner
Member
 
Registered: Aug 2006
Posts: 147

Rep: Reputation: 16
You can filter arp packets with iptables (and other firewall software) if that's what you mean. You can't prevent Address Resolution Protocol, it's part of the way computers automatically obtain an IP address.

Arp traffic from the "internet at-large," if there even is any, is filtered out by your ISP. Your neighbors on the same subnet all broadcast arp packets when they first turn on their computer and every time their IP# lease expires (in my case hourly). Lots of arp traffic is normal on busy cable subnets. If you're receiving too many arp packets, talk to your ISP and see what they say about it. They have the tools to sniff your connection. And they might say something similar to what I said in a way that makes more sense.
 
Old 10-12-2006, 12:14 AM   #3
fozner
Member
 
Registered: Aug 2006
Posts: 147

Rep: Reputation: 16
Sorry double-post edited out. I may as well add that arp attack is best performed by a hacker who is already inside your home or company's network, in other words, if you are worried about arp attack, arp attack is the least of your problems. Put up a good firewall and clean your network of viruses, trojans and other malware frequently, especially if it contains windows machines. An infected windows (or linux for that matter) box is just that, a window into your network.

And just because so-called malware removers give you a thumbs-up icon, don't assume they are totally clean. New threats are coming out every day, perhaps every hour. If my reputation was on the line, I wouldn't trust a computer until it had been backed up and re-imaged.

Last edited by fozner; 10-12-2006 at 12:32 AM.
 
Old 10-12-2006, 07:42 PM   #4
CN_jianzi
LQ Newbie
 
Registered: Feb 2006
Posts: 5

Original Poster
Rep: Reputation: 0
Thumbs up

Quote:
Originally Posted by fozner
Sorry double-post edited out. I may as well add that arp attack is best performed by a hacker who is already inside your home or company's network, in other words, if you are worried about arp attack, arp attack is the least of your problems. Put up a good firewall and clean your network of viruses, trojans and other malware frequently, especially if it contains windows machines. An infected windows (or linux for that matter) box is just that, a window into your network.

And just because so-called malware removers give you a thumbs-up icon, don't assume they are totally clean. New threats are coming out every day, perhaps every hour. If my reputation was on the line, I wouldn't trust a computer until it had been backed up and re-imaged.


thank for your reply!~
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange ARP behavior : A linux server responds to all ARP requests Hdvd21 Linux - Networking 3 05-07-2009 02:03 AM
arp attack or something like this ddaas Linux - Security 9 04-04-2006 09:43 PM
re:arp sureshzi General 4 01-26-2006 09:33 AM
Disabling ARP probes after receiving an ARP request AltecLansingMan Linux - Networking 1 03-30-2004 01:25 PM
How to create an proxyarp entry in arp table by using arp command? himalayas Linux - Networking 0 06-04-2003 04:14 AM


All times are GMT -5. The time now is 01:36 AM.

Main Menu
 
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration