[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: First line in /etc/hosts

On Feb 23, Junichi Uekawa <dancer@netfort.gr.jp> wrote:

> > Also: As far as the kernel is concerned, any local IP is local to *all*
> > interfaces, and it will happly reply to it (ARP and so on) if allowed to.
> > The rp_filter will often avoid trouble here, BUT routers often have to
> > disable rp_filter.  So add some rules to the firewall make sure nothing gets
> > into unless it is a local packet.
> So, by this implication, if I use arping and pretend to be
> to another host, that host will try to ping the network if I ping 
> on the target host?
No, packets /from/ locally configured addresses coming from external
interfaces are always dropped no matter how rp_filter is configured.


Attachment: signature.asc
Description: Digital signature

Reply to: