[Olsr-dev] ARP prevention!

Markus Kittenberger (spam-protected)
Wed Aug 17 22:18:31 CEST 2011


but again?
why a olsrd plugin?

where are the benefits from an standalone arp protections?

MArkus

On Wed, Aug 17, 2011 at 10:10 PM, Andrea Di Pasquale <(spam-protected)>wrote:

> I think that a network must be secure, from any point of view.
> My propose is to have a integrity secure from any attacks for a protocol L3
> with L2 together. (-:
>
> Best regards,
>
>
> Andrea
>
> Il giorno 17/ago/2011, alle ore 22:01, Markus Kittenberger ha scritto:
>
>
>
> On Wed, Aug 17, 2011 at 9:26 PM, Andrea Di Pasquale <(spam-protected)>wrote:
>
>> Whenever olsrd establishes a route, such as:
>>
>
> hmm one last try to clarify things: (-;
>
> 1. olsrd does not deal with arp resolution or even mac adresses,..
> infact it never does anything, which will "directly" trigger any arp action
>
> (except its optional arp_refresh plugin, wihich i would simply not use
> together with arpOn)
>
> but yes an olsrd nodes/meshes can suffer from arp-spoofing.
> (like any device, which uses arp protocol)
>
> but i still see no reason why it should be an olsrd plugin,.. (cause of 1.)
> (an till now, you never presented a reason for this,..)
>
> it should be enough to simply run arpOn on any mesh node,..
>
> as i assume no interaction of arpon and olsrd is needed.
> arpon "just" have to make sure that the mac adresses in the local arptable
> are correct. (same as it will do on a node which does not even run olsrd)
>
> Markus
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.olsr.org/pipermail/olsr-dev/attachments/20110817/f0a1f471/attachment.html>


More information about the Olsr-dev mailing list