RE: arpwatch and more

2001-03-19 Thread Jeff S Wheeler
don't grok ethernet, so below is that message for the benefit of everyone. -Original Message- From: Jeff S Wheeler [mailto:[EMAIL PROTECTED] Sent: Friday, March 16, 2001 11:44 PM To: Mike Fedyk Subject: RE: arpwatch and more An ethernet switch won't send frames to "multiple po

RE: arpwatch and more

2001-03-19 Thread Jeff S Wheeler
don't grok ethernet, so below is that message for the benefit of everyone. -Original Message- From: Jeff S Wheeler [mailto:[EMAIL PROTECTED]] Sent: Friday, March 16, 2001 11:44 PM To: Mike Fedyk Subject: RE: arpwatch and more An ethernet switch won't send frames to "

Re: arpwatch and more

2001-03-18 Thread Tim Kent
I guess that means you have to keep those quad Ethernet Sun cards away. Tim. - Original Message - From: "Marc Haber" <[EMAIL PROTECTED]> To: Sent: Saturday, March 17, 2001 7:50 PM Subject: Re: arpwatch and more > On Fri, 16 Mar 2001 13:05:06 -0800, Mike Fedy

Re: arpwatch and more

2001-03-18 Thread Tim Kent
I guess that means you have to keep those quad Ethernet Sun cards away. Tim. - Original Message - From: "Marc Haber" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, March 17, 2001 7:50 PM Subject: Re: arpwatch and more > On Fri, 16 Mar 2001 1

Re: arpwatch and more

2001-03-17 Thread Marc Haber
On Fri, 16 Mar 2001 13:05:06 -0800, Mike Fedyk <[EMAIL PROTECTED]> wrote: >On Fri, Mar 16, 2001 at 09:24:56PM +0100, Marc Haber wrote: >> Please be aware, though, that the MAC address is trivial to forge >> nowadays. >Hmm, how does a switch deal with the same mac address coming from two ports >at t

Re: arpwatch and more

2001-03-17 Thread Marc Haber
On Fri, 16 Mar 2001 13:05:06 -0800, Mike Fedyk <[EMAIL PROTECTED]> wrote: >On Fri, Mar 16, 2001 at 09:24:56PM +0100, Marc Haber wrote: >> Please be aware, though, that the MAC address is trivial to forge >> nowadays. >Hmm, how does a switch deal with the same mac address coming from two ports >at

Re: arpwatch and more

2001-03-16 Thread Mike Fedyk
On Fri, Mar 16, 2001 at 09:24:56PM +0100, Marc Haber wrote: > On Fri, 16 Mar 101 12:28:54 -0500 (EST), Allen Ahoffman > <[EMAIL PROTECTED]> wrote: > >can someone tell me how to secure a network so that: > >the router won't route traffic if the specific mac address isn't > >registered before hand? >

Re: arpwatch and more

2001-03-16 Thread Marc Haber
On Fri, 16 Mar 101 12:28:54 -0500 (EST), Allen Ahoffman <[EMAIL PROTECTED]> wrote: >can someone tell me how to secure a network so that: >the router won't route traffic if the specific mac address isn't >registered before hand? Kernel 2.4 netfilter can make routing decisions depending on the MAC a

Re: arpwatch and more

2001-03-16 Thread Mike Fedyk
On Fri, Mar 16, 2001 at 09:24:56PM +0100, Marc Haber wrote: > On Fri, 16 Mar 101 12:28:54 -0500 (EST), Allen Ahoffman > <[EMAIL PROTECTED]> wrote: > >can someone tell me how to secure a network so that: > >the router won't route traffic if the specific mac address isn't > >registered before hand?

Re: arpwatch and more

2001-03-16 Thread Mike Fedyk
On Fri, Mar 16, 2001 at 12:28:54PM -0500, Allen Ahoffman wrote: > can someone tell me how to secure a network so that: > the router won't route traffic if the specific mac address isn't > registered before hand? > it would keep people in line. > better, a table with mac addresses and ip(s) (its alr

Re: arpwatch and more

2001-03-16 Thread Marc Haber
On Fri, 16 Mar 101 12:28:54 -0500 (EST), Allen Ahoffman <[EMAIL PROTECTED]> wrote: >can someone tell me how to secure a network so that: >the router won't route traffic if the specific mac address isn't >registered before hand? Kernel 2.4 netfilter can make routing decisions depending on the MAC

Re: arpwatch and more

2001-03-16 Thread debian
Well, you could buy a managed switch from HP or Cisco. :-) Personally, I have no idea how to do this sort of thing with Linux; but it's probably better to do it at the backbone with a reliable switch than to throw in extra servers with multiple network cards all over the place (which would incre

Re: arpwatch and more

2001-03-16 Thread Mike Fedyk
On Fri, Mar 16, 2001 at 12:28:54PM -0500, Allen Ahoffman wrote: > can someone tell me how to secure a network so that: > the router won't route traffic if the specific mac address isn't > registered before hand? > it would keep people in line. > better, a table with mac addresses and ip(s) (its al

Re: arpwatch and more

2001-03-16 Thread debian
Well, you could buy a managed switch from HP or Cisco. :-) Personally, I have no idea how to do this sort of thing with Linux; but it's probably better to do it at the backbone with a reliable switch than to throw in extra servers with multiple network cards all over the place (which would inc