Re: Have I misunderstood an ipchains concept?

[Christian Pernegger <pernegger@chello.at>]

> What they are saying is that a machine *should* never recieve a packet that
> has originated from outside the machine, yet claims (by way of the source
> IP) to have originated from that machine?

Exactly. A packet arriving on an eth interface comes from outside.
I always thought that a packet destined to the host itself would
arrive on the loopback interface, no matter what.

Nevertheless a broadcast initiated on a host "seems to come from"
outside it, not lo.

> There are probably better ways of protecting against this...

This is surely true, but not the point. I rather relied on
that bahavior.

Regards

Christian