Ubuntu anti-ARP spoofing (arptables)

Article Title: Ubuntu arptables ). Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

I have been using Ubuntu for a long time, and I have never been concerned about getting people IP addresses. Even one day, my IP addresses were used and I found some information on the Internet, we found the arptables stuff! ~

The idea is similar to that of LNS !~~ Send a message to the LAN (FF: FF, instead of receiving the sent information. Oh, so this trick is very useful !~ It can also be used to attack other people's IP addresses. It's nice!

First install arptables:

* Sudo apt-get install arptables

Then define the rule:

* Sudo arptables-a input -- src-mac! Gateway physical address-j DROP

* Sudo arptables-a input-s! Gateway IP-j DROP

* Sudo arptables-a output -- destination-mac ff: ff-j ACCEPT

Oh, but this is a little bad. Resources in the LAN are not available !~ For example, fliggy, War3! If you want to use these rules, just give the rules above to Del !~

* Sudo arptables-F

Of course, we can make a script that runs automatically every time it starts up !~ Sudo gedit/etc/init. d/arptables. The content is as follows:

#! /Bin/sh

PATH =/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

Arptables-a input -- src-mac! Gateway physical address-j DROP

Arptables-a input-s! Gateway IP-j DROP

Arptables-a output -- destination-mac ff: ff-j ACCEPT

Then add execution attributes to arptables,

Sudo chmod 755/etc/init. d/arptables

Set arptables to run automatically,

Sudo update-rc.d arptables start 99 S.

Directly set with sysv-rc-conf