##  ipguard

    ipguard v1.04
    Copyright (c) 2010 SeaD <sead at deep.perm.ru>

    See COPYRIGHT for copying info

##  what is ipguard

    ipguard - tool designed to protect Ethernet LAN IP address space
    by ARP spoofing.

    ipguard listens network for ARP packets. All permitted MAC-IP pairs
    listed in 'ethers' file. If it recieves one with MAC-IP pair, which is
    not listed in 'ethers' file, it will send ARP reply with configured
    fake address. This will prevent not permitted host to work properly
    in local ethernet segment.


##  installation

    NOTE: libnet 1.0 and libnet 1.1 has totally incompatible API
          so there are no more support for libnet 1.0. Sorry.

    Use *BSD ports(7):
    # cd /usr/ports/security/ipguard && make install clean

    or

    Download from: http://ipguard.deep.perm.ru/files/

    Note: you will need two libs for ipguard:
        libpcap (ftp://ftp.ee.lbl.gov/)
        libnet 1.1.x (http://www.packetfactory.net/libnet/dist/)

    # edit Makefile for your system

    # make
    # make install

    How to start and use ipguard please see man page ipguard(8)

    Example of ipguard actions in tcpdump(1) format in README.tcpdump

    Log file description in README.log

##  platforms

    Developed on:
    Gentoo Linux, gcc-4.4.2, libnet-1.1.4-r1, i386

    Compiled and tested on:
    FreeBSD 4.11, gcc-2.95.4, libnet-1.1.2, i386
    FreeBSD 5.5, gcc-3.4.2, libnet-1.1.2, i386
    FreeBSD 7.0, gcc-4.2.1, libnet-1.1.2, i386
    FreeBSD 8.0, gcc-4.2.1, libnet-1.1.2, i386
    OpenBSD 3.6, gcc-2.95.3, libnet-1.1.2.1, i386
    Gentoo Linux 2007.1, gcc-3.4.5, libnet-1.1.2, i386
    Debian Linux 4.0, gcc-4.1.2, libnet-1.1.2, i386

    Any reports or patches for other platforms are welcome.


##  credits

    Authors of libpcap, libnet, ip-sentinel
    citrin <citrin at citrin.ru> for testing assistance
    irix <irix at ukr.net> for testing assistance


SeaD <sead at deep.perm.ru>

##  $Id: README,v 1.1.1.1 2012/02/21 21:59:41 misho Exp $