ipguard

ipguard listens to a network for ARP packets. All permitted MAC/IP pairs are listed in the "ethers" file. If it recieves a packet with an MAC/IP pair which is not listed in the "ethers" file, it will send an ARP reply with a configured fake address. This will prevent forbidden hosts from working properly in this Ethernet segment.