Windows 10 Help in preventing ARP poisoning

ARP cache poisoning only works on a local network and any device would be susceptible to that type of attack. If someone is connected to your network and is poisoning your ARP cache you have bigger problems

you could build a custom endian firewall into an old router and put that between your Windows system and the big bad internet... that gives you total control but takes a bit more than a basic understandiing to set up

ussnorway said:

you could build a custom endian firewall into an old router and put that between your Windows system and the big bad internet... that gives you total control but takes a bit more than a basic understandiing to set up

Click to expand...

Hi thanks,
For now I am using xarp pro for both Windows and Linux and it seems to work good enough.
Yep the solution as you have suggested is a good way to go with but it requires a dedicated host for ddos filtering and tracking.
As far as I have understood xarp tries to understand if the ARP traffic sender/ exchanger is a legit one by actively polling back it (and all the senders that appear in the air traffic for wifi connections) - this way the "first" ARP traffic is then buffered until the polling rules are not validated.
Two years ago I had to buy a Cisco AP and change all my wifi network cards to be able to use the MFP security protocol, today I need to use dedicated daemon tools to prevent ddos/spoofing on the air traffic. Air traffic sucks

ARP only works locally so no it can't be done remotely and only impacts local assets arp operates on layer 2

Neemobeer said:

ARP only works locally so no it can't be done remotely and only impacts local assets arp operates on layer 2

Click to expand...

A wifi network has no physical boundaries as the packets are sent via radio waves, this means that a wifi network can not be closed in any way and an attacker can inject arp packets at his own wish by even simulating the identity of the attacked host. Do you want to see my xarp log or my Wireshark one? For me the topic is closed.

They still have to be connected to your network. A lan is a logical separation of devices via subnet mask. A lan is not nessicarily geographically localized.