MITM Attack Not Working on D-Link Router?

[ThunderMax]

Hey guys, I'm new to BackTrack (about a week into it) but so far it's pretty cool...Anyways...

I've successfully done ARP poisoning using Ettercap on a linksys router but when I tried it on my other router (D-Link DIR-655) it won't poison! I've tried only poisoning one way and still nothing...I got on Google and read something about DNSSEC (DNS Security Extensions) and it talks about how new D-Links are able to block MITM attacks...

Basically what I'm asking is why and how does the D-Link block it (DNSSEC??) and why doesn't the Linksys? Also if this IS a security feature are there other ways around it?

P.S. Both routers are mine and I'm only asking for educational purposes...I find it entertaining.

Thanks!

[2901119]

I personally have a dlink router and have no problems with arp cache poisoning. I've used arpspoof and ettercap and both work flawlessly. Maybe myself or someone else could better help you if you gave us some more specific info or if you shared your commands and output.

[ThunderMax]

2901119, What model D-Link do you have?

To be honest with you I'v only used the GUI version Ettercap-GTK because it seems to work great on most other routers. I'm assuming the command line version gives you detailed outputs...I'll try using the command line version and see if I can give you guys a more detailed report...besides outputs what other information do you think would help you?

[2901119]

maybe your router settings but i really don't believe thats even necessary unless by chance you have mac filtering or something in place.

[ThunderMax]

Well even if MAC filtering was enabled all I would have to do is fake my MAC with another hosts MAC address using the macchanger command. I've disabled all my firewall settings, the settings in my router look fine to me...anyone else have any ideas?

[2901119]

sorry i initially missed the question about what model. mine is a dir-615 N300 extreme