You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
60 lines
1.9 KiB
60 lines
1.9 KiB
## |
|
## arpalert.conf -- ARPAlert server configuration |
|
## |
|
|
|
maclist file = @l_prefix@/etc/arpalert/arpalert.allow |
|
maclist alert file = @l_prefix@/etc/arpalert/arpalert.deny |
|
auth request file = @l_prefix@/etc/arpalert/arpalert.authreq |
|
|
|
maclist leases file = @l_prefix@/var/arpalert/db/arpalert.leases |
|
lock file = @l_prefix@/var/arpalert/run/arpalert.pid |
|
log file = @l_prefix@/var/arpalert/log/arpalert.log |
|
log level = 6 |
|
use syslog = false |
|
|
|
daemon = true |
|
user = @l_rusr@ |
|
umask = 0177 |
|
|
|
#interface = eth0 |
|
dump paquet = false |
|
|
|
action on detect = "" |
|
ignore me = true |
|
max alert = 20 |
|
execution timeout = 10 |
|
|
|
dump black list = false |
|
dump white list = false |
|
dump new address = true |
|
|
|
mac timeout = 259200 |
|
max entry = 1000000 |
|
anti flood interval = 5 |
|
anti flood global = 50 |
|
ignore unknown sender = false |
|
ignore self test = false |
|
unauth ignore time method = 2 |
|
max request = 1000000 |
|
|
|
log referenced address = false |
|
alert on referenced address = false |
|
log deny address = true |
|
alert on deny address = false |
|
log new address = true |
|
alert on new address = false |
|
log new mac address = true |
|
alert on new mac address = false |
|
log ip change = true |
|
alert on ip change = false |
|
log mac change = true |
|
alert on mac change = false |
|
log unauth request = false |
|
alert on unauth request = false |
|
log request abus = true |
|
alert on request abus = false |
|
log mac error = true |
|
alert on mac error = false |
|
log flood = true |
|
alert on flood = false |
|
|
|
|