Scutum is an ARP firewall that prevents your computer from being arp spoofed.

Scutum is an ARP firewall that prevents your computer from being arp spoofed.

Scutum is an ARP firewall that prevents your computer from being arp spoofed. Scutum controls “arptables” in your computer so it accepts ARP packets only from the gateway. This way, when people with malicious intentions cannot spoof your arp table. Scutum also prevents other people from detecting your device on LAN if scutum is used with properly configured TCP/UDP firewall.

scutum – arp firewall

SCUTUM working flow:
– postconnect
1. Connect to wifi
2. Accept all ARP packets
3. Cache gateway MAC address by establishing a socket connection with a timeout of 0
4. Add Gateway MAC to exception
5. DROP all ARP packets
6.Finished

– postdisconnect
1. Accept all ARP packets

Usage & Installation:

Source: https://github.com/K4YT3X/