<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 4/12/23 09:09, 0zl wrote:<br>
</div>
<blockquote type="cite"
cite="mid:2ead14d2-441a-e114-0daf-5c1501836118@riseup.net">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
On 4/12/23 08:19, Geert Stappers wrote:<br>
<blockquote type="cite"
cite="mid:ZDY%2FTCkXJgJcK2%2F2@gpm.stappers.nl">
<pre class="moz-quote-pre" wrap="">On Wed, Apr 12, 2023 at 02:03:22AM +0300, 0zl wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 4/12/23 01:59, 0zl wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Second I don't understand how this works exactly, I intend to create a
script that adds a permanent arp entry to make me more resilient to ARP
spoofing attacks, should I create the entry on arp add/old and remove on
del; OR use these arp-add and arp-del actions to do the same.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">Replying to myself because I made a typo in this paragraph. I meant to say:
"should I create the ARP entry on the add/old action and remove on del"
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">Experiment
Groeten
Geert Stappers
</pre>
</blockquote>
<p>This dhcp-script seems to work just fine, not sure what the
point of arp-add/arp-del is though:<br>
</p>
<pre>#!/bin/sh
action=$1 hw_addr=$2 hostname=$3
case $action in
add|old) arp -s $hostname $hw_addr ;;
del) arp -d $hostname ;;
esac
</pre>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Dnsmasq-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk">Dnsmasq-discuss@lists.thekelleys.org.uk</a>
<a class="moz-txt-link-freetext" href="https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss">https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss</a>
</pre>
</blockquote>
<p>UPDATE: `--script-arp` is ABSOLUTELY not what you want in this
case. What it does is execute the dhcp-script with arp-add/del
action whenever a new entry to the ARP table is added, that
includes those spoofed/not authorized by the DHCP server (I've
just tested it). What is needed in this case is the add/old and
del events, DO NOT use --script-arp in this case.</p>
<p>Best regards<br>
</p>
</body>
</html>