## ipguard
ipguard v1.04
Copyright (c) 2010 SeaD <sead at deep.perm.ru>
See COPYRIGHT for copying info
## what is ipguard
ipguard - tool designed to protect Ethernet LAN IP address space
by ARP spoofing.
ipguard listens network for ARP packets. All permitted MAC-IP pairs
listed in 'ethers' file. If it recieves one with MAC-IP pair, which is
not listed in 'ethers' file, it will send ARP reply with configured
fake address. This will prevent not permitted host to work properly
in local ethernet segment.
## installation
NOTE: libnet 1.0 and libnet 1.1 has totally incompatible API
so there are no more support for libnet 1.0. Sorry.
Use *BSD ports(7):
# cd /usr/ports/security/ipguard && make install clean
or
Download from: http://ipguard.deep.perm.ru/files/
Note: you will need two libs for ipguard:
libpcap (ftp://ftp.ee.lbl.gov/)
libnet 1.1.x (http://www.packetfactory.net/libnet/dist/)
# edit Makefile for your system
# make
# make install
How to start and use ipguard please see man page ipguard(8)
Example of ipguard actions in tcpdump(1) format in README.tcpdump
Log file description in README.log
## platforms
Developed on:
Gentoo Linux, gcc-4.4.2, libnet-1.1.4-r1, i386
Compiled and tested on:
FreeBSD 4.11, gcc-2.95.4, libnet-1.1.2, i386
FreeBSD 5.5, gcc-3.4.2, libnet-1.1.2, i386
FreeBSD 7.0, gcc-4.2.1, libnet-1.1.2, i386
FreeBSD 8.0, gcc-4.2.1, libnet-1.1.2, i386
OpenBSD 3.6, gcc-2.95.3, libnet-1.1.2.1, i386
Gentoo Linux 2007.1, gcc-3.4.5, libnet-1.1.2, i386
Debian Linux 4.0, gcc-4.1.2, libnet-1.1.2, i386
Any reports or patches for other platforms are welcome.
## credits
Authors of libpcap, libnet, ip-sentinel
citrin <citrin at citrin.ru> for testing assistance
irix <irix at ukr.net> for testing assistance
SeaD <sead at deep.perm.ru>
## $Id: README,v 1.1.1.1 2012/02/21 21:59:41 misho Exp $
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>