Hello,

> Dear list,
>
> after reading the man page I neither understand maclist.allow nor
> authrq.conf.
>
> What is supposed to happen if a put the line
>> 01:02:03:04:05:06 10.0.0.1 eth0 ip_change
> into maclist.allow? I guessed that 01:02:03:04:05:06 is allowed to
> have changing IP addresses. However, I still get syslog messages
> telling me that there are different IP addresses. Even if I
> duplicate that line for all IP addresses associated with that MAC
> address, those messages still show up.
>
> Is there a way to avoid such warnings for certain MAC and/or IP
> addresses?

can you send me your config file and your arpalert version ?

> Moreover, what is an "authorisation" for a MAC address?
> What is different if I put the following line into authrq.conf:
>> [01:02:03:04:05:06 eth0] 10.0.0.1 10.0.0.2

the authorisation is a list of ip addresses can be requested by a mac
adress. in the exemple, the host with the mac address "01:02:03:04:05:06"
can be send arp request for ip 10.0.0.1 and 10.0.0.2.

if arpalert watch arp request from the mac address "01:02:03:04:05:06" and
the ip requested is 10.6.7.8, it can be send alert.

Regards,
Thierry

> Thanks in advance
> Jens
> --
> To unsubscribe send a mail to list+unsubscribe_at_arpalert.org
>
>

-- 
To unsubscribe send a mail to list+unsubscribe_at_arpalert.org