Scientific Linux Forum.org



  Reply to this topicStart new topicStart Poll

> arp poisoning attack, arp poisoning attack
MikeTO
 Posted: Apr 29 2014, 08:23 PM
Quote Post


SLF Newbie


Group: Members
Posts: 1
Member No.: 3083
Joined: 29-April 14









I am having issues. I had several arp poisoning attacks. I ended up setting static arp on my linux box. The problem is I'm still getting the issue. I have tried another dns server, nothing changed.

Any ideas how I can defeat this?
PM
^
krachbumm
 Posted: Apr 30 2014, 03:17 PM
Quote Post


SLF Member
***

Group: Members
Posts: 66
Member No.: 1961
Joined: 15-October 12









QUOTE (MikeTO @ Apr 29 2014, 10:23 PM)
I am having issues.  I had several arp poisoning attacks.  I ended up setting static arp on my linux box.  The problem is I'm still getting the issue.  I have tried another dns server, nothing changed.

Any ideas how I can defeat this?


Interesting. How did you detect this and how does it affect your system(downtime/hiccups/logfile-spamming/chaos)?

I found this one, seems to one of the more recent studies:
http://www.ijsrp.org/research-paper-0713/ijsrp-p19114.pdf

sl offers arptables/arpwatch in the main repos...
PM
^
tux99
 Posted: Apr 30 2014, 06:18 PM
Quote Post


SLF Moderator
********

Group: Moderators
Posts: 1273
Member No.: 224
Joined: 28-May 11









QUOTE (MikeTO @ Apr 29 2014, 09:23 PM)
I am having issues.  I had several arp poisoning attacks.  I ended up setting static arp on my linux box.  The problem is I'm still getting the issue.


How did you determine that you had arp poisoning attacks? What are the actual symptoms you notice?
Is this on a home network or on a company network?
If it's on a home network then your router is probably hacked (most routers are full of security flaws and back-doors). Try to reset your router config to factory default and update it with the latest official firmware.

QUOTE
I have tried another dns server, nothing changed.


Changing the DNS server won't help, ARP is and DNS are completely unrelated.

--------------------
My personal SL6 repository, specialized in audio/video software: http://pkgrepo.linuxtech.net/el6/
(can be used together with EPEL and ELRepo repositories) - repository mirror: http://linuxsoft.cern.ch/linuxtech/el6/
PM
^
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

Topic Options Reply to this topicStart new topicStart Poll