[comp.unix.wizards] Disabling the dynamic updating of ARP tables

arnold@emory.UUCP (Arnold D. Robbins {EUCC}) (05/05/87)

Machine: DEC Vax 11/780
OS:	 Mt. Xinu 4.3 BSD + NFS

For various security oriented reasons, we would like to be able to
load the kernel's ARP tables at boot time, and then disable any further
ARP table additions or deletions.

The man page for arp(8) indicates that "arp -f file" will load the arp
tables from a file. Fine and good; this works. Such addresses get loaded
into the arp tables and stay there.

However, is there any way to get the kernel to ignore anything new that
should come along? If a new machine gets added to our ethernet and starts
doing IP stuff, I want the vax to ignore that machine until I manually
update the arp tables. Is this possible? If so, how do I do this?

Please mail and I'll summarize, unless this really is of general interest.

Thanks in Advance,
-- 
Arnold Robbins
CSNET:	arnold@emory	BITNET:	arnold@emoryu1
ARPA:	arnold%emory.csnet@csnet-relay.arpa
UUCP:	{ akgua, decvax, gatech, sb1, sb6, sunatl }!emory!arnold