I have a single routed network with three virtual machines. One of them is Kali and I'm messing around with ettercap and arpspoof. DNS resolution isn't working as expected and I'm guessing it's something related to network filters, but if I've gathered correctly none of the network filters are enabled by default?
I did find this feature request to use the 'clean-traffic' filter on interfaces by default, but the person closed it saying that "there is ipmac spoofing detection" by default. Where is this alleged detection enabled or configured? I'm having a hard time tracking anything down.
Edit: I did find the mac_filter option in /etc/libvirt/qemu.conf and set it to 0, but that doesn't seem to have made a difference.
[link] [comments]
