Ben's notes

Link to this comparison view

--- arpwatch [2014/06/24 19:48] – admin
+++ arpwatch [2021/10/30 13:20] (current) – [ARP monitoring with arpwatch and msmtp] admin
@@ Line 1: / Line 1: @@
 {{tag>[network security arp linux]}}
-~~TOC~~
-=====ARP monitoring with arpwatch=====
+=====ARP monitoring with arpwatch and msmtp=====
-Prerequisites:
-  * Make sure e-mail works
+  * Install packages. <code>apt install arpwatch msmtp</code>
+  * Configure arpwatch interface. <code>cat > /etc/arpwatch/eth0.iface <<'EOF'
+IFACE_ARGS="-s /usr/bin/msmtp -m monitor@1k2.nl"
+EOF</code>
+  * Configure msmtp (Fastmail example).<code>cat > /var/lib/arpwatch/.msmtprc <<'EOF'
+defaults
+auth           on
+tls            on
+tls_trust_file /etc/ssl/certs/ca-certificates.crt
+logfile        ~/.msmtp.log
-  * Install aprwatch. <code>yum install arpwatch</code>
+account         fastmail
-  * Start arpwatch at boot. <code>chkconfig arpwatch on</code>
+host            smtp.fastmail.com
-  * Change config if needed, edit **/etc/sysconfig/arpwatch**.
+port            465
-  * Start arpwatch. <code>service arpwatch start</code>
+from            <FROM ADDRESS>
+user            <YOUR USERNAME>
+password        <YOUR APP PASSWORD>
+tls_starttls    off
+set_from_header on
+account default : fastmail
+EOF</code>
+  * Set owner and mode:<code>chown arpwatch. /var/lib/arpwatch/.msmtprc
+chmod 600 /var/lib/arpwatch/.msmtprc</code>
+  * Start arpwatch at boot. <code>systemctl enable --now arpwatch@eth0</code>