How to protect from ARP spoofing
In my campus, some people they are using netcut in Windows and they are blocking us not to use Internet.
Since I am a Ubuntu user, I can't install neither nutcut nor netcut-defender to protect and even I tried TuxCut. It's is also not working properly.
Can any one give me the right solution for this?
Try ArpON, it is already in Ubuntu repository:
sudo apt-get install arpon
sudo arpon -i eth0 -d
References:
- Wikipedia: ARP spoofing (contains a list of related tools)
- How to detect and block an ARP spoofing/poisoning attack on a LAN
- How to: Detect ARP Spoofing under UNIX or Linux
man arpon
Try changing macaddress. It will remove you from the list of the attacker.
-
Figure out Network Interface name which connects you to wifi
sudo ifconfig
If ifconfig is not installed
sudo apt install net-tools
-
This will give you a list of network interface card. Some of them are for bluetooth, wifi. Note down the name responsible for wifi connection. For my PC it was wlp3s0
-
Now install macchanger
sudo apt-get install macchanger
-
Turn off the network interface card
sudo ifconfig wlp3s0 down
-
Randomly change macaddress
sudo macchanger -r wlp3s0
-
Turn on the network interface card
sudo ifconfig wlp3s0 up
-
Turn off wifi and turn it on
Macaddress is changed, internet will work fine. This changes macaddress temporarily. Upon restart you need to change address again.