From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1GdheN-0007yw-RF for garchives@archives.gentoo.org; Sat, 28 Oct 2006 06:26:36 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.8/8.13.6) with SMTP id k9S6MjmV003693; Sat, 28 Oct 2006 06:22:45 GMT Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.186]) by robin.gentoo.org (8.13.8/8.13.6) with ESMTP id k9S6INDh031024 for ; Sat, 28 Oct 2006 06:18:23 GMT Received: by nf-out-0910.google.com with SMTP id p46so2251964nfa for ; Fri, 27 Oct 2006 23:18:23 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:date:from:to:subject:message-id:mail-followup-to:references:mime-version:content-type:content-disposition:in-reply-to:user-agent; b=VzSvWEwJ3pwMmol1CVXZdXRTll1Fk8iYLzIbP59uPL0NurzM0OYn8mIt2PDberGJZAIASA4+bj/Kb01D4y4BQPnkqJaPJcD2w46yzSAOAGSNBOT5aRv/7UEQuH6QRbzeiKck//XZpx5iGW0mgp2VBxKdUOfeo7wzfm41yYNXU04= Received: by 10.49.94.20 with SMTP id w20mr900146nfl; Fri, 27 Oct 2006 23:18:23 -0700 (PDT) Received: from mars.solar ( [212.112.241.159]) by mx.google.com with ESMTP id q28sm749190nfc.2006.10.27.23.18.21; Fri, 27 Oct 2006 23:18:23 -0700 (PDT) Received: by mars.solar (Postfix, from userid 1000) id 7ED85D18F5; Sat, 28 Oct 2006 09:16:17 +0300 (EEST) Date: Sat, 28 Oct 2006 09:16:17 +0300 From: Ali Polatel <31415926j@gmail.com> To: gentoo-security@lists.gentoo.org Subject: Re: [gentoo-security] ArpStar Message-ID: <20061028061617.GB13658@mars> Mail-Followup-To: gentoo-security@lists.gentoo.org References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-security@gentoo.org Reply-to: gentoo-security@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="7AUc2qLy4jB3hD7Z" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.11 X-Archives-Salt: 2f63e41c-264c-4c99-a4ef-d7bbb5cb5976 X-Archives-Hash: 45255efe4c2acff53a8f906a7174feed --7AUc2qLy4jB3hD7Z Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, I've been playing with it too but never seriously tested it.Try using it this way: modprobe arpstar heal=3D0 trustedmac=3D"001122334455" trustedip=3D"11.22= =2E33.44.55" Change trusted mac to your router's mac address and trusted ip to its ip address.If you still get many Cain and Abel warnings then we can think about tweaking code ;) By the way I also wrote an ebuild for wmarpstar see bug 148862 if you wa= nt to use it. On 15:46 Sun 22 Oct , 7v5w7go9ub0o wrote: > Am testing Arpstar (masked), which seems to be issuing lots of Cain and = =20 > Abel attack warnings - which I presume are false. >=20 > 1. Does anyone know if Arp* is otherwise working as advertised? >=20 > 2. Has anyone tweaked the coding to fix the Cain and Abel routine? >=20 >=20 > --=20 > gentoo-security@gentoo.org mailing list >=20 >=20 --=20 Ali Polatel <31415926j@gmail.com> www.rootshell.be/~hawking gpg: 322FEACE fp: 7738 BAA0 834B 43BF 7C1E 22EA D14C 0688 322F EACE () ascii ribbon campaign - against html mail=20 /\ =20 --7AUc2qLy4jB3hD7Z Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFQvWx0UwGiDIv6s4RAsn3AJ9KhJmy2bMlzQd03nRkfXKifkREagCfSJ7I ow77YQMs8Vc+mIgkX3N4yjU= =qcet -----END PGP SIGNATURE----- --7AUc2qLy4jB3hD7Z-- -- gentoo-security@gentoo.org mailing list