Re: Fw: Can a daemon listen only on some interfaces?
On Sun, 09 Dec 2001, Guido Hennecke wrote:
> At 09.12.2001, Henrique de Moraes Holschuh wrote:
> > On Sun, 09 Dec 2001, Guido Hennecke wrote:
> > > 127.0.0.1 Gateway <your official ip address> Interface <his
> > > externel interface>
> > >
> > > he can reach your service bound to 127.0.0.1. And this without
> > > activating ip_forward on your computer!
> > Is this true even if the policy of the forward chain (for ipchains) is set
> > to deny ? (and the equivalent, for iptables) ?
>
> Those packets did not go throught the forwards chain. For local
> interfaces no routing is needed.
If they came over the network, they should have. That is a broken behaviour
(breaks principle of less surprise, at the very least).
Well, ipmasq needs an update to trash anything incoming and outgoing from
!lo with a destination of 127.0.0.1/8 then.
--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh
Reply to: