引用:

【咖啡馆的贴子】楼上，你到底在说什么呀。我有点被搞糊涂了。 我上次按照你说的http://forum.ikaka.com/topic.asp?board=58&artid=8379906，绑定了静态规则，在绑定的时候，用“自动选择”或“获取网关地址”或“自动获取”时，出来的都是192.168.1.1。但是我使用这种绑定方式，今天还是出现了问题，我是无线路由上网的，好象本机的IP是可以变的，主要是192.168.1.100、192.168.1.101、192.168.1.102三种变化，而不同的时候查阅MAC，这个MAC也是可变的，有两个MAC地址。 按照你说的绑定静态规则后，今天上网，防火墙报警，说是收到ARP冲突包，然后干脆无法上网了，我后来关闭了ARP保护，就可以上网了。 另外，你说的那个方式和置顶帖里的说法不同，我就是家庭ADSL然后由路由器分两台机器上网的，那个置顶帖说我这种情况不用管ARP欺骗，但上次你没提到这点。我现在搞不懂要听谁的了。 ………………

我认为你个人家庭ADSL 两台电脑上网就不必启用ARP规则了，只要两台电脑都没ARP病毒就可以了。—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

局域网里的ARP病毒真的很讨厌。—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

引用:

【haterfw的贴子】 我认为你个人家庭ADSL 两台电脑上网就不必启用ARP规则了，只要两台电脑都没ARP病毒就可以了。 ………………

引用:

【haterfw的贴子】 我认为你个人家庭ADSL 两台电脑上网就不必启用ARP规则了，只要两台电脑都没ARP病毒就可以了。 ………………

主要是有以下疑点：
1、我本来根本没关注ARP欺骗这个事情，但装了瑞星防火墙之后，它确实自己跳出来报警，要我在两个MAC中选择，然后我才考虑这个事情——这是误报吗？

2、为了保险起见，我曾经采用彩影软件ARP防火墙软件，这个软件报过我的电脑被发送和主动向外发送ARP欺骗包，我觉得很奇怪；

3、因为瑞星防火墙知道ARP欺骗这样的事情以后，我在论坛询问，按照过客2007的办法绑定了静态规则，那个彩影软件ARP防火墙没有再报ARP攻击事件，我就删了它（它是试用版，无条件免费用15天）；

4、今天瑞星防火墙前所未有地报告说我收到ARP欺骗包，和静态规则冲突，我一看还是欺骗包的地址还是最开始（即上文1中提到的）让我选的两个MAC中的一个。然后我的网页打不开了，我只好关闭了防止ARP欺骗功能，又能上网了，在疑惑中，我一度去“开始——运行——”中去查MAC的地址，发现自己的MAC已经改成和收到的那个所谓欺骗包的地址一样了。然后我上网一段时间后，MAC又改回来了，又和静态规则绑定里的一样了。（同时这个过程中，IP地址也有改动，原来是192.168.1.102，现在是192.168.1.101）。

5、我家里确实是两台机上网，查毒没查出有ARP病毒，另外，我的无线网络没装密码，不能完全排除楼上楼下是否有其他人在用我们的网络）—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

2007-11-02 21:48:56, Detected an ARP spoofing packet;IP Address:222.203.39.42;Original MAC address:0-e0-4d-1c-ec-30;Conflicting MAC address:0-18-f3-82-a6-33;Rule Name:;
2007-11-02 21:48:56, Detected an ARP spoofing packet;IP Address:222.203.39.42;Original MAC address:0-e0-4d-1c-ec-30;Conflicting MAC address:0-18-f3-82-a6-33;Rule Name:;
2007-11-02 21:48:48, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a4-81-7c;Conflicting MAC address:0-73-44-59-53-bd;Rule Name:;
2007-11-02 21:48:48, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a4-81-7c;Conflicting MAC address:0-19-e0-3c-1-ae;Rule Name:;
2007-11-02 21:48:48, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a4-81-7c;Conflicting MAC address:0-19-e0-3f-c2-aa;Rule Name:;
2007-11-02 21:48:48, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a4-81-7c;Conflicting MAC address:0-19-e0-b3-67-9a;Rule Name:;
2007-11-02 21:48:46, Detected an ARP spoofing packet;IP Address:222.203.39.42;Original MAC address:0-e0-4d-1c-ec-30;Conflicting MAC address:0-18-f3-82-a6-33;Rule Name:;
2007-11-02 21

里面有222.203.39.42的日志。

但似乎192.168.1.1的欺骗包更多，很有可能192.168.1.1确实在不断的发欺骗包，或者你选信任地址的时候选择错了。—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

看图，不想说了—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

继续上图—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

今天特疯狂，从13点到现在一直弹出这个冲突—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

看日志吧
冲突是222.203.39.38
日志确显示是192.168.1.1—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

楼上的那个对话框是提示用户存在冲突ARP。计算机并不能区分那个是欺骗。只有你选择了一个信任的arp-ip，计算机才会把和你信任的发生冲突的arp包当作欺骗包，并记录到日志里。

看下面的日志，这些冲突是你的信任的ip-mac发生冲突的记录。

2007-11-05 13:55:06, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-b3-67-9a;Rule Name:Default Gateway;
2007-11-05 13:55:06, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:06, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:06, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:05, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-73-44-59-53-bd;Rule Name:Default Gateway;
2007-11-05 13:55:05, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-14-78-a4-81-7c;Rule Name:Default Gateway;
2007-11-05 13:55:05, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-3c-1-ae;Rule Name:Default Gateway;
2007-11-05 13:55:05, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-3f-c2-aa;Rule Name:Default Gateway;
2007-11-05 13:55:05, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-14-78-b5-8e-a8;Rule Name:Default Gateway;
2007-11-05 13:55:05, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-b3-67-9a;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-73-44-59-53-bd;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-3f-c2-aa;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-3c-1-ae;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-14-78-a4-81-7c;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-14-78-b5-8e-a8;Rule Name:Default Gateway;
2007-11-05 13:55:04, Detected an ARP spoofing packet;IP Address:192.168.1.1;Original MAC address:0-14-78-a7-c-a2;Conflicting MAC address:0-19-e0-b3-67-9a;Rule Name:Default Gateway;
2007-11-05 13:55:03, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:03, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;
2007-11-05 13:55:03, Detected an ARP spoofing packet;IP Address:222.203.39.254;Original MAC address:0-4-80-73-b7-0;Conflicting MAC address:0-4-4b-80-80-3;Rule Name:Default Gateway;


—ðm"ú&deccibbs.ikaka.com¿Q\ܽy

另外你查一下0-19-e0-3c-1-ae
应该是这个网卡在不断发欺骗包。—ðm"ú&deccibbs.ikaka.com¿Q\ܽy