ipguard listens to a network for ARP packets. All
permitted MAC/IP pairs are listed in the "ethers"
file. If it recieves a packet with an MAC/IP pair
which is not listed in the "ethers" file, it will
send an ARP reply with a configured fake address.
This will prevent forbidden hosts from working
properly in this Ethernet segment.