In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes:
>On 17-Mar-05, 01:01 (CST), Joel Aelwyn <[EMAIL PROTECTED]> wrote: 
>> * The ability for an interface to receive, by default, only traffic that
>>   is destined for that interface. (Non-promiscuous mode; promiscuous mode
>>   availability is a big plus, but not required from the OS point of view)
>
>Linux fails this. Even with forwarding disabled, it will accept packets
>for an address on interface A via interface B.

Enable rp_filter and it does reject such packets.

echo 1 >/proc/sys/net/ipv4/conf/${dev}/rp_filter
-- 
Blars Blarson                   [EMAIL PROTECTED]
                                http://www.blars.org/blars.html
With Microsoft, failure is not an option.  It is a standard feature.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to