Messages in this thread | | | Date | Sun, 3 Mar 2002 02:38:36 +0000 (GMT) | From | Julian Anastasov <> | Subject | Re: Network Security hole (was -> Re: arp bug ) |
| |
Hello,
On Sat, 2 Mar 2002, Alan Cox wrote:
> Language confusion - "if you want to make the case" = "if you want to argue > that a value of rp_filter = 2 should in future (after you implement it) mean > apply a both way rule - then I agree)
Yes, the arp_prefsrc feature can depend on rp_filter||arp_filter but I prefer to keep it independent. And there is an agreement on netdev that all ARP filtering issues (including the problem with shared IPs in clusters) should be fixed by maintaining ARP hooks for universal filtering. Then even the arp_prefsrc feature can be implemented with proper rules. TODO. Until then, this is a temp solution.
> Alan
Regards
-- Julian Anastasov <ja@ssi.bg>
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |