lkml.org 
[lkml]   [1998]   [May]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: 2.1.102: ipchains: REJECT does only DENY - network gurus please
On Mon, May 18, 1998 at 07:38:47PM +0200, mlord wrote:
> ak@muc.de wrote:
> ...
> > (3) is probably the best solution, but it is really worth to care
> > about this weird case? Alexey, what do you mean?
>
> As weird a case as it may seem, this is probably the most-used
> setup for firewalling.
>
> Most folks who use linux-firewalling are probably just using it
> because it's necessary for ip-masquerading machines behind a
> dial-out PPP box.

Masquerading rules don't send ICMP messages.


But there is another problem I first did think of. It means that
Linux 2.1 will never send "normal" DEST_UNREACH/NET_UNREACH messages
because that code uses icmp_send too. So we need to solve it.

There is only one problem: the RTCF_* flags already uses all available
32bits in the flag word, so we can't just add another one :(



-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:42    [W:0.064 / U:1.628 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site