Re: Any reasons to filter ARP packets?

Ertugrul Soeylemez wrote:
"Mikhail Zotov" <muxaul@xxxxxxxx> (06-04-03 23:21:49):
Great. I know a web-zine that will undoubtedly be glad to publish
your article:

http://slackworld.berlios.de/

It's next issue is in work right now :-)

Great information. Thank you. =)

You can find the contact address at the bottom of this page:
http://slackworld.berlios.de/links.html

I would just leave all ARP replies enabled.
....
It is easy for someone to get to your MAC address.

Hm. How can one get my MAC address if I enable the device with
"ifconfig $device -arp"?

The only way to defend against the MITM is key- or cert-based
authentication. Just to encrypt everything is not enough. And you need
some secure channel to distribute your key. It's best to meet your
friends personally and give them a floppy disk. Do not distribute your
key via internet, because the MITM is waiting there. ;)

I am afraid I don't fully understand the point. Do you mean encryption
in the sense of the GNU Privacy Guard? IIRC, one of the good things
about it is that one does not have to worry about the way the public
part of his/her authentication key is distributed.

Thanks again for the very interesting communication.

Regards,
Mikhail

.

Quantcast