On Sun, 27 Oct 2002, Simon Kirby wrote:
> On Sun, Oct 27, 2002 at 08:31:53PM +0100, Peter Palfrader wrote:
>
> > On Sun, 27 Oct 2002, Blars Blarson wrote:
> >
> > > weasel@debian.org writes:
> > >
> > > >I've the following setup:
> > > >
> > > > 10.200.118.0/24 (internal)
> > > > |
> > > > |
> > > > | eth0:10.200.118.1
> > > > +--------+
> > > > | marvin |
> > > > +--------+
> > > > | eth1: 10.2.2.20
> > > > |
> > > > |
> > > > 10.0.0.0/8 (external)
> > > >
> > > >Now if a host on the external network sends an 'arp who-has
> > > >10.200.118.1' request marvin answers on eth1.
> > > >Is there any way to _stop_ that behaviour?
> >
> > My problem is one layer below: arp. From the description the hidden
> > patch suggested by Emmanuel looks promising. I will have to try it
> > tomorrow.
>
> You shouldn't have to... "arp_filter" is there for that reason; whether
> it works or not is another question. :) Try:
>
> echo 1 > /proc/sys/net/ipv4/conf/all/arp_filter
>
> ...and see if that makes a difference. I'd like to hear the results
> either way, because I've been expecting this to work on a number of
> routers I've configured.
BTDT, it doesn't solve the problem.
As I understand it arp_filter is for another kind of usage: To answer arp
requests from the right interface when you have more than one on a
single medium.
yours,
peter
--
PGP signed and encrypted | .''`. ** Debian GNU/Linux **
messages preferred. | : :' : The universal
| `. `' Operating System
http://www.palfrader.org/ | `- http://www.debian.org/
Attachment:
pgpwmthVZJ9tZ.pgp
Description: PGP signature