ARP Spoofing Protection (ARP Bind) #2150

New issue

Open

opened 2026-03-04 01:48:25 -05:00 by deekerman · 1 comment

deekerman commented

2026-03-04 01:48:25 -05:00

Owner

Originally created by @EntropySmoke on GitHub (Nov 16, 2020).

Prerequisites

I am running the latest version
I checked the documentation and found no answer
I checked to make sure that this issue has not already been filed

Problem Description

AdGuard Home is running as a local DNS and DHCP server on Raspberry Pi 2. Router is not used as DHCP server. I'd like to reduce chances of ARP spoofing. Some routers, like DD-WRT, provide basic ARP spoofing protection. I can also use Windows commands to create static IP-MAC ARP-bind between Windows devices and router. How can I ARP-bind AdGuard Home local DNS and DHCP server to devices connected to it?

Proposed Solution

AdGuardHome.yaml section where static IP-MAC ARP bind can be specified.

Originally created by @EntropySmoke on GitHub (Nov 16, 2020). ### Prerequisites - [x] I am running the latest version - [x] I checked the documentation and found no answer - [x] I checked to make sure that this issue has not already been filed ### Problem Description AdGuard Home is running as a local DNS and DHCP server on Raspberry Pi 2. Router is not used as DHCP server. I'd like to reduce chances of ARP spoofing. Some routers, like DD-WRT, provide basic ARP spoofing protection. I can also use Windows commands to create static IP-MAC ARP-bind between Windows devices and router. How can I ARP-bind AdGuard Home local DNS and DHCP server to devices connected to it? ### Proposed Solution AdGuardHome.yaml section where static IP-MAC ARP bind can be specified.

deekerman added the

feature request

label

2026-03-04 01:48:25 -05:00

deekerman commented

2026-03-04 01:48:31 -05:00

Author

Owner

@ghost commented on GitHub (Mar 9, 2021):

And why not do the same with the link local/uuid of DHCPv6 too (since the future is ipv6 the same protection must be enforced too.

@ghost commented on GitHub (Mar 9, 2021): And why not do the same with the link local/uuid of DHCPv6 too (since the future is ipv6 the same protection must be enforced too.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/AdGuardHome#2150

No description provided.

Rows
Columns