{{tag>[network security arp linux]}}

=====ARP monitoring with arpwatch and msmtp=====

  * Install packages. <code>apt install arpwatch msmtp</code>
  * Configure arpwatch interface. <code>cat > /etc/arpwatch/eth0.iface <<'EOF'
IFACE_ARGS="-s /usr/bin/msmtp -m monitor@1k2.nl"
EOF</code>
  * Configure msmtp (Fastmail example).<code>cat > /var/lib/arpwatch/.msmtprc <<'EOF'
defaults
auth           on
tls            on
tls_trust_file /etc/ssl/certs/ca-certificates.crt
logfile        ~/.msmtp.log

account         fastmail
host            smtp.fastmail.com
port            465
from            <FROM ADDRESS>
user            <YOUR USERNAME>
password        <YOUR APP PASSWORD>
tls_starttls    off
set_from_header on

account default : fastmail
EOF</code>
  * Set owner and mode:<code>chown arpwatch. /var/lib/arpwatch/.msmtprc
chmod 600 /var/lib/arpwatch/.msmtprc</code>
  * Start arpwatch at boot. <code>systemctl enable --now arpwatch@eth0</code>