Subject: Re: rc.d script for adding static ARP entries
To: None <tech-net@NetBSD.org>
From: David Young <dyoung@pobox.com>
List: tech-net
Date: 08/23/2005 11:41:48
On Tue, Aug 23, 2005 at 04:47:26PM +0200, Geert Hendrickx wrote:
> I've created an rc.d script (staticarp) to add static ARP entries, listed
> in /etc/arp.conf, at boot time.  This can help prevent IP spoofing attacks,
> since static ARP entries cannot be altered by (spoofed) ARP reply packets
> floating around your network, they are permanent.  

It isn't pretty, but you can add ARP entries with route.conf.  I put a
line like this into route.conf the other day,

host 1.2.3.4 -link tlp0:00.10.20.30.40.50 -iface

Dave

-- 
David Young             OJC Technologies
dyoung@ojctech.com      Urbana, IL * (217) 278-3933