终所周知，虽然LINUX不会有ARP病毒，但是难免有WINDOWS服务器在一起，这样我们可以定时地把网关的IP+MAC 地址

 

使用arp -f

 

-f 是指绑定来自一文件  文件的格式为ip 加一空格 后面为MAC地址

 

[root@mail ~]# vi arp.conf
192.168.0.1 00:17:16:01:B2:1C   #ROUTES_IP

然后arp -f arp.conf

没有绑定的SERVER

[root@server ~]# arp -a
? (192.168.6.202) at 00:02:A5:46:07:B2 [ether] on eth1
? (192.168.0.53) at 00:0E:A6:12:14:E7 [ether] on eth0
? (192.168.0.10) at 00:0B:CD:1C:11:6C [ether] on eth0
? (192.168.0.33) at 00:0B:CD:1C:0A:C3 [ether] on eth0
? (192.168.0.15) at 00:0C:6E:08:0A:4B [ether] on eth0
? (192.168.0.1) at 00:17:16:01:B2:1C [ether] on eth0

绑定的SERVER

 

[root@mail ~]# arp -a
? (192.168.0.1) at 00:17:16:01:B2:1C [ether] PERM on eth0
? (192.168.0.12) at 00:1D:0F:0D:F0:0D [ether] on eth0
? (192.168.0.53) at 00:0E:A6:12:14:E7 [ether] on eth0

 

[root@mail ~]# arp
Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.0.1              ether   00:17:16:01:B2:1C   CM                    eth0
192.168.0.12             ether   00:1D:0F:0D:F0:0D   C                     eth0
192.168.0.53             ether   00:0E:A6:12:14:E7   C                     eth0
[root@mail ~]#

M标莶代理已经成功进行静态绑定

 

添加到计划任务

 

每五分钟执行一次

 

*/5 * * * * /sbin/arp -f arp.conf