Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp

From: Ruslan Ermilov (ru_at_freebsd.org)
Date: 09/24/03

  • Next message: Michael Sierchio: "Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp" 
    Date: Wed, 24 Sep 2003 19:21:11 +0300
To: Michael Sierchio <kudzu@tenebras.com>

    On Wed, Sep 24, 2003 at 07:44:26AM -0700, Michael Sierchio wrote:
    > FreeBSD Security Advisories wrote:
    >
    > >IV. Workaround
    > >
    > >There is no known workaround at this time.
    >
    > Using static ARP entries and turning off ARP on the interface
    > should be a workaround. Whether this is remotely feasible
    > depends on your situation.
    >
    I still have not committed the code that supports static ARP
    on an interface -- there's currently no way to do static ARP
    only, if you disable ARP on an interface it will be disabled
    in its whole.

    Cheers, 

    -- 
Ruslan Ermilov		Sysadmin and DBA,
ru@sunbay.com		Sunbay Software Ltd,
ru@FreeBSD.org		FreeBSD committer

  • Next message: Michael Sierchio: "Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp"

    Relevant Pages

    • Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp
      ... >> Using static ARP entries and turning off ARP on the interface ... >> should be a workaround. ... > I still have not committed the code that supports static ARP ... if you disable ARP on an interface it will be disabled ...
      (FreeBSD-Security)
    • Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp
      ... >>Using static ARP entries and turning off ARP on the interface ... > I still have not committed the code that supports static ARP ... if you disable ARP on an interface it will be disabled ... it's just *kidding* about the NOARP flag? ...
      (FreeBSD-Security)
    • Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp
      ... >> I still have not committed the code that supports static ARP ... if you disable ARP on an interface it will be disabled ... > I'd like to review and potentially test this patch before it goes in, ...
      (FreeBSD-Security)
    • Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp
      ... >>I still have not committed the code that supports static ARP ... if you disable ARP on an interface it will be disabled ... IFF_NOARP flag is set on an interface. ...
      (FreeBSD-Security)
    • by MAC blocking
      ... i use static arp on my network. ... all existing computers are set in with arp -f /etc/ethers ... and interface has STATICARP option set. ...
      (freebsd-questions)