All releases of IP Sentinel


Release Notes: This version adds an "--action" option to execute a program when a disallowed ARP packet is detected. Sorting of IP addresses happens in an endian-neutral manner, and support for the old, deprecated logging format was physically removed from the source.


Release Notes: This version made it possible to block hosts with a certain MAC address regardless of their IP. This feature could help to isolate hosts infected by worms or viruses. The default options were changed.


Release Notes: Code cleanups are the main change in this version. Compilation issues with dietlibc 0.26 were fixed, and the tai64n format is now used for timestamps.


Release Notes: This release fixes the handling of MAC-annotated IPs when there exists a more general rule. It provides workarounds for gcc and dietlibc bugs also, and the behavior on duplicate networks with MAC-annotation is now predictable so that e.g. MAC pools for networks can be configured.


Release Notes: This version fixes a bug in the FROM-mode in combination with 0.0.0.0 IPs, which are used by DHCP or DAD. It is now permissible to specify MACs of source-addresses, and to poison an intruders IP when he has sent a request. In combination with MAC-tagged IP addresses, the correct MAC can be propagated when an intruder uses the IP of temporarily turned off machines. Some other parts of the code were made more RFC826 compliant.


Release Notes: This version uses an internal scheduler instead of fork() to send delayed ARP-replies. A new operation mode was added which answers requests coming from intruders. It is now possible to specify the default MAC address.


Release Notes: This version allows you to specify address ranges, and ships with improved init scripts.


Release Notes: The program now only listens to the interface specified on the command line instead of all interfaces.


Release Notes: This version allows the user to specify a MAC address for networks, and has an enhanced logging. Some parameters were adjusted, and smaller build-problems were solved.


Release Notes: Signal handling with dietlibc and a typo which caused excessive memory consumption were fixed. Parameters of certain mechanisms were documented and placed into a central header-file. Testsuite does not rely on a specific bsort() implementation anymore.