looking for ARP poisioning prevention....

Net_Spy · 04-29-2007, 04:07 AM

Greetings to all members....

Im running a small network round about 100 clients.Using fedora core 3 server,the problem is the arp poision attacks or mac/ip spooping which cause ddos to my server i fed up to this local attacks.I just want to know how to prevent this attacks on my lan to prevent ddos.if some one change his or her mac/ip so that person request should be drop or not to reach to the server.Im looking forward for your kind response.

Regards
Net_Spy

Capt_Caveman · 04-29-2007, 02:19 PM

One way is to just use static arp table entries so that a client can't poison it. There are also several tools such as arpwatch which does passive monitoring and arpstar which can take proactive measures including blacklisting hosts when it detects malicious arp traffic.