Re: ARP requests on my net?



Edward Krack wrote:
Edward Krack:


It has to know where to go. Can you drive cross country
without a road map?


Users computer types in a URL to browse the net.
Users computer is config to use DNS server to resolve the
the name in the URL to an IP address.
TCP/IP uses ARP.

Eh? Why does it need the MAC? And why does it need the MAC
of my router? My router is the one which needs to know
MACs. AFAIK, TCP/IP uses IP, not ARP. I just went and got
my handy-dandy "Understanding TCP/IP (tm)" manual and looked
in the index, and ARP isn't even mentioned. That's Transmission
Control Protocol over Internet Protocol. The layers are,
AIUI,

HTTP, SMTP, FTP, etc.
TCP
IP (ICMP)
LAN/PPP/Frame Relay/ATM or etc.
physical

ARP should be in Level 2, the P2P LAN layer (Ethernet).
Nothing to do with IP. IP can run over SLIP, PPP, Frame
Relay, ATM. It shouldn't care about stuff needed by
the layer 2 protocol for physical routing. Anyway, TCP is
layer 4, two levels above MACs.

Host found. Session established.
Users Computer: Hello, are you there?

Everything up to here needs only IP addresses, I thought.
The router needs to know the MACs associated with the
IP addresses so it can forward the messages, but ARP
is finding layer 2 protocol, not layer 3 like IP.
AIUI, ARP is used for the P2P stuff at layer 2.
Why does my Linux machine need to know the MAC for the
router?

DNS: Yes I'm here. Okay, lets ride.
ARP: Rand McNally truckers road map.

But the ARP is being done on the router. And even if it
weren't, why would my computer want to know the MAC
of a computer it has no direct connect to?

WWW: Malicious or Invalid?


Unless dslmodem uses DCHP and was infected from previous
owner.

Eh? On the LAN side, I use fixed IP, for the computers,
and for the router. The router on the WAN side accepts DHCP,
but my computer never sees that address. The modem, facing
back to the router and computer, has a fixed IP on 168.x.x.x.

Mike
--
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
This message made from 100% recycled bits.
You have found the bank of Larn.
I can explain it for you, but I can't understand it for you.
I speak only for myself, and I am unanimous in that!

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list



Relevant Pages

  • Re: iptables block mac
    ... Many layer II switches are capable of this. ... all other MACs should be blocked. ... This isn't the ONLY setting preventing people from getting out through the router, ...
    (comp.security.firewalls)
  • Re: gateway IP address
    ... An Ethernet (Layer 2) network is a 'local' environment, ... a gateway IP address can ... send the Ethernet frame to the router, so that it can pass it to the device ...
    (comp.dcom.sys.cisco)
  • RE: ARP spoofing attacks
    ... Arpwatch can also use sendmail to email you ... the "arping" utility will let you ping neighbours at the layer 2 ... level i.e. specify the mac address directly, and also bypass the arp ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • Re: XP Home safe file sharing (newbie)
    ... >> Zone Alarm is an excellent internal layer of protection, ... >> You really, really, need an outer layer, ie a NAT router, protecting your ... >Router is NAT or NOT! ... The C45 IS a NAT router. ...
    (microsoft.public.windowsxp.network_web)
  • Re: XP vulnerabilities?
    ... >> Get a DSL router with NAT and then use ONE firewall application. ... The personal firewall will block outbound. ... whole issue of "stealth" became less important on January 25, ... Each layer is necessary because no layer produces ...
    (alt.computer.security)