ipguard listens to a network for ARP packets. All permitted MAC/IP pairs are listed in the "ethers" file. If it recieves a packet with an MAC/IP pair which is not listed in the "ethers" file, it will send an ARP reply with a configured fake address. This will prevent forbidden hosts from working properly in this Ethernet segment.
| Tags | Security Networking |
|---|---|
| Licenses | BSD Revised |
| Operating Systems | POSIX Linux BSD OpenBSD |
| Implementation | C |