Linux下使用arptables阻止arp欺騙—輕舞飛揚

標籤：policy   linux   飛揚   程式   

http://sourceforge.net/projects/ebtables/files/arptables/

    tar xvzf arptables-v0.0.4.tar.gz

   cd arptables-v0.0.4

   make

make install

命令程式

[[email protected]~]# ls /usr/local/sbin/arptables*

/usr/local/sbin/arptables 

/usr/local/sbin/arptables-restore

/usr/local/sbin/arptables-save

啟動指令碼

/etc/rc.d/init.d/arptables

 

 

[[email protected] arptables-v0.0.4]# arptables -A INPUT  -i eth0 --src-ip 172.16.1.254 --src-mac ! cc:00:04:fc:00:00 -j DROP
[[email protected] arptables-v0.0.4]# arptables -L -n
Chain INPUT (policy ACCEPT)
-j DROP -i eth0 -s 172.16.1.254 ! --src-mac cc:00:04:fc:00:00

Chain OUTPUT (policy ACCEPT)

Chain FORWARD (policy ACCEPT)
[[email protected] arptables-v0.0.4]# arptables-save
*filter
:INPUT ACCEPT
:OUTPUT ACCEPT
:FORWARD ACCEPT
-A INPUT -j DROP -i eth0 -s 172.16.1.254 ! --src-mac cc:00:04:fc:00:00

[[email protected] arptables-v0.0.4]# arptables-save>/etc/sysconfig/arptables
[[email protected] arptables-v0.0.4]# service arptables start
啟動 Arp filtering (arptables)：                           [確定]

 

 

[[email protected]~]# arptables-save

*filter

:INPUT ACCEPT

:OUTPUT ACCEPT

:FORWARD ACCEPT

-A INPUT -j DROP-i eth0 -s 172.16.1.254 ! --src-mac cc:01:05:10:00:00

 

arptables-save>/etc/sysconfig/arptables

本文出自 “輕舞飛揚” 部落格，請務必保留此出處http://xiaofeixia.blog.51cto.com/521300/1567330

Linux下使用arptables阻止arp欺騙—輕舞飛揚