misc/98078: Static arp entries may be ignored

[Lukasz Wasikowski]

>Number:         98078
>Category:       misc
>Synopsis:       Static arp entries may be ignored
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon May 29 10:50:21 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Lukasz Wasikowski
>Release:        FreeBSD 4.11, FreeBSD 5.5, FreeBSD 6.1
>Organization:
Hipernet Sp. z o.o.
>Environment:
FreeBSD trab.brda.net 4.11-RELEASE-p17 FreeBSD 4.11-RELEASE-p17 #0: Fri May 19 14:17:22 CEST 2006     root at trab.brda.net:/usr/obj/usr/src/sys/hipernet  i386

FreeBSD cs56.hipernet.pl 5.5-RELEASE FreeBSD 5.5-RELEASE #0: Sat May 27 03:25:25 CEST 2006     root at cs56.hipernet.pl:/usr/obj/usr/src/sys/hipernet  i386

FreeBSD firma.hipernet.pl 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Tue May  9 16:02:23 CEST 2006     root at firma.hipernet.pl:/usr/obj/usr/src/sys/hipernet  i386

>Description:
When static arp entries are used to gain access to network via a FreeBSD router, there is a possibility to ommit those entries by setting client's ethernet device into promiscuous mode.
>How-To-Repeat:
On FreeBSD router:
[root at firma ~] arp -s 192.168.1.10 aa:bb:cc:dd:ee:ff

On any client connected to that router via Ethernet:
[root at aniluap ~] ping -q -c 5 212.122.212.1
PING 212.122.212.1 (212.122.212.1): 56 data bytes

--- 212.122.212.1 ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss

[root at aniluap ~] ifconfig rl0 promisc
[root at aniluap ~] ping -q -c 5 212.122.212.1
PING 212.122.212.1 (212.122.212.1): 56 data bytes

--- 212.122.212.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 3.624/8.333/23.164/7.442 ms

>Fix:
Unknown.
>Release-Note:
>Audit-Trail:
>Unformatted: