Re: arp MiTM

2009-03-21 Thread Henning Brauer
* irix [2009-03-09 17:40]: > Sorry, if I been rude. I not administartor of network, i am client. > And other client use MiTM. This network is use unmanaged switches, and > ISP spit on it. That's why i try to find out to protect my > workstation from MiTM, with out static arp entry.

Re: arp MiTM

2009-03-09 Thread irix
Hello Misc, Theo and other, thanks. -- Best regards, irix mailto:i...@ukr.net

Re: arp MiTM

2009-03-09 Thread Jacob Meuser
On Mon, Mar 09, 2009 at 02:34:07PM +, michal wrote: > Jacob Yocom-Piatt wrote: > >irix wrote: > >>Hello Misc, > >> > >> I am a customer and not the network administrator, and someone in > >> the network makes MiTM attack, a network of billet in the > >> uncontrolled swithes and

Re: arp MiTM

2009-03-09 Thread Paul de Weerd
On Mon, Mar 09, 2009 at 07:18:59PM +0200, irix wrote: | Hello Paul, | | The problem is that, I am not an administrator of the network. | I am a client of the network. The network is built on the unmanaged switches. | ISP to the problem do not care, so interested in this patch. As has been

Re: arp MiTM

2009-03-09 Thread Stuart Henderson
On 2009-03-09, irix wrote: > Hello Misc, > > On Mon, Mar 9, 2009 at 1:11 PM, irix wrote: > > >>ARP is insecure, no matter how many patches you apply or how many hacks you >>try. If you want something more secure, use 802.1X, use security on the >>switch, use IPv6+IPSec/SeND, etc. > > Sorry, if

Re: arp MiTM

2009-03-09 Thread Theo de Raadt
> The problem is that, I am not an administrator of the network. > I am a client of the network. The network is built on the unmanaged > switches. > ISP to the problem do not care, so interested in this patch. May you > help with patch on OpenBSD ? The network is built wrong. No, we will

Re: arp MiTM

2009-03-09 Thread Henry Sieff
On Mon, Mar 9, 2009 at 9:15 AM, Eric Furman wrote: > On Mon, 9 Mar 2009 16:54:27 +0100, "Felipe Alfaro Solana" > said: >> On Mon, Mar 9, 2009 at 1:11 PM, irix wrote: >> >> > Hello Misc, >> > >> > How to protect your server from such attacks without the use of static arp >> > entries? >> > By f

Re: arp MiTM

2009-03-09 Thread irix
Hello Paul, The problem is that, I am not an administrator of the network. I am a client of the network. The network is built on the unmanaged switches. ISP to the problem do not care, so interested in this patch. May you help with patch on OpenBSD ? Monday, March 9, 2009, 3:02:23 PM, you

Re: arp MiTM

2009-03-09 Thread Eric Furman
On Mon, 9 Mar 2009 16:54:27 +0100, "Felipe Alfaro Solana" said: > On Mon, Mar 9, 2009 at 1:11 PM, irix wrote: > > > Hello Misc, > > > > How to protect your server from such attacks without the use of static arp > > entries? > > By freebsd 5.0 patch was written arp_antidote ( > > http://freecap

Re: arp MiTM

2009-03-09 Thread irix
Hello Misc, On Mon, Mar 9, 2009 at 1:11 PM, irix wrote: >ARP is insecure, no matter how many patches you apply or how many hacks you >try. If you want something more secure, use 802.1X, use security on the >switch, use IPv6+IPSec/SeND, etc. Sorry, if I been rude. I not administartor of ne

Re: arp MiTM

2009-03-09 Thread Felipe Alfaro Solana
On Mon, Mar 9, 2009 at 1:11 PM, irix wrote: > Hello Misc, > > How to protect your server from such attacks without the use of static arp > entries? > By freebsd 5.0 patch was written arp_antidote ( > http://freecap.ru/if_ether.c.patch), > somebody could port it on openbsd? > > Also, in freebsd

Re: arp MiTM

2009-03-09 Thread bofh
On Mon, Mar 9, 2009 at 10:34 AM, michal wrote: > Funny, I would say you are being more rude then he is Why? Jacob was simply telling him why he was rude. -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk "This officer's men seem to follow him merely out of idle

Re: arp MiTM

2009-03-09 Thread Bret S. Lambert
On Mon, Mar 09, 2009 at 02:34:07PM +, michal wrote: > Jacob Yocom-Piatt wrote: >> irix wrote: >>> Hello Misc, >>> >>> I am a customer and not the network administrator, and someone in >>> the network makes MiTM attack, a network of billet in the >>> uncontrolled swithes and

Re: arp MiTM

2009-03-09 Thread michal
Jacob Yocom-Piatt wrote: irix wrote: Hello Misc, I am a customer and not the network administrator, and someone in the network makes MiTM attack, a network of billet in the uncontrolled swithes and ISP will not translate everything on the managed. Therefore, software imp

Re: arp MiTM

2009-03-09 Thread Jacob Yocom-Piatt
irix wrote: Hello Misc, I am a customer and not the network administrator, and someone in the network makes MiTM attack, a network of billet in the uncontrolled swithes and ISP will not translate everything on the managed. Therefore, software implementation of this patch fo

Re: arp MiTM

2009-03-09 Thread irix
Hello Misc, I am a customer and not the network administrator, and someone in the network makes MiTM attack, a network of billet in the uncontrolled swithes and ISP will not translate everything on the managed. Therefore, software implementation of this patch for openbsd. O

Re: arp MiTM

2009-03-09 Thread Paul de Weerd
>From a quick glance over the patch, it seems pretty useless unless you also prevent MAC spoofing. You may want to look into port security for your switches or 802.1x if this is a big concern to you. Cheers, Paul 'WEiRD' de Weerd On Mon, Mar 09, 2009 at 02:11:38PM +0200, irix wrote: | Hello Misc

arp MiTM

2009-03-09 Thread irix
Hello Misc, How to protect your server from such attacks without the use of static arp entries? By freebsd 5.0 patch was written arp_antidote (http://freecap.ru/if_ether.c.patch), somebody could port it on openbsd? Also, in freebsd it is possible to specify a flag through the ifconfig on the