From owner-freebsd-net Thu Jul 29 17:57:25 1999 Delivered-To: freebsd-net@freebsd.org Received: from xylan.com (postal.xylan.com [208.8.0.248]) by hub.freebsd.org (Postfix) with ESMTP id 2B13114E96 for ; Thu, 29 Jul 1999 17:57:19 -0700 (PDT) (envelope-from wes@softweyr.com) Received: from mailhub.xylan.com by xylan.com (8.8.7/SMI-SVR4 (xylan-mgw 2.2 [OUT])) id RAA09362; Thu, 29 Jul 1999 17:54:36 -0700 (PDT) Received: from omni.xylan.com by mailhub.xylan.com (SMI-8.6/SMI-SVR4 (mailhub 2.1 [HUB])) id RAA23016; Thu, 29 Jul 1999 17:52:22 -0700 Received: from softweyr.com (dyn5.utah.xylan.com) by omni.xylan.com (4.1/SMI-4.1 (xylan engr [SPOOL])) id AA03191; Thu, 29 Jul 99 17:54:34 PDT Message-Id: <37A0F7C9.676F675C@softweyr.com> Date: Thu, 29 Jul 1999 18:54:33 -0600 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.5 [en] (X11; U; FreeBSD 3.1-RELEASE i386) X-Accept-Language: en Mime-Version: 1.0 To: Bill Fumerola Cc: Garrett Wollman , "Jordan K. Hubbard" , net@FreeBSD.ORG Subject: Re: cvs commit: src/release/sysinstall tcpip.c References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Bill Fumerola wrote: > > On Wed, 28 Jul 1999, Garrett Wollman wrote: > > > Switches won't help (unless you turn learning off and manually > > configure every Ethernet address in your entire network into every > > switch). All an attacker has to do to sniff your packets is to send > > packets pretending to be you, thereby causing the switches to learn > > the attacker's location. > > Not when I tell my switch that port 1 is VLAN 1 and port 2 is VLAN 2. > Port 1 will never see port 2's traffic. Or turn on VLAN Authentication, then he CAN'T send any packets as you unless he knows your VLAN password. If he tries, and your MAC and/or IP address is already known in that VLAN, it will turn off the port and send an alert to the Network Management System, too. Oh, how I love this networking stuff. ;^) -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC http://softweyr.com/ wes@softweyr.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message