From 34f06d94c70a54d16b58a81865cd9f5132247432 Mon Sep 17 00:00:00 2001 From: Vincent BENOIT Date: Tue, 28 Feb 2023 16:06:40 +0100 Subject: [PATCH] =?UTF-8?q?correction=20des=20confs=20pour=20=C3=A9viter?= =?UTF-8?q?=20l'ARP=20poisonning=20du=20t=C3=A9l=C3=A9phone=20de=20Lilian?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- recipes-connectivity/dhcpcd/files/dhcpcd.conf | 3 +++ recipes-support/dnsmasq/files/dnsmasq.conf | 11 ++++++++++- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/recipes-connectivity/dhcpcd/files/dhcpcd.conf b/recipes-connectivity/dhcpcd/files/dhcpcd.conf index bd9f474..7461704 100644 --- a/recipes-connectivity/dhcpcd/files/dhcpcd.conf +++ b/recipes-connectivity/dhcpcd/files/dhcpcd.conf @@ -29,6 +29,9 @@ require dhcp_server_identifier # OR generate Stable Private IPv6 Addresses based from the DUID slaac private +# Don't send any ARP requests. This also disables IPv4LL +noarp + # static IP configuration: interface eth0 static ip_address=192.168.10.10/24 diff --git a/recipes-support/dnsmasq/files/dnsmasq.conf b/recipes-support/dnsmasq/files/dnsmasq.conf index c12662d..4866a65 100644 --- a/recipes-support/dnsmasq/files/dnsmasq.conf +++ b/recipes-support/dnsmasq/files/dnsmasq.conf @@ -1,3 +1,12 @@ +bogus-priv +# requetes DHCP pour des baux inconnus par des hotes inconnus ne soient pas ignorees +dhcp-authoritative +dhcp-leasefile=/tmp/dhcp.leases +# nom de domaine pour dnsmasq +domain=kinehost.lan + interface=wlan0 bind-dynamic -dhcp-range=10.1.1.11,10.1.1.150,255.255.255.0,12h +# active l'ip forwarding +dhcp-option=19,1 +dhcp-range=10.1.1.100,10.1.1.150,255.255.255.0,24h