On 05/07/2012 04:50 PM, Maarten Vanraes wrote:
Op maandag 07 mei 2012 14:23:44 schreef Frank Griffin:
[...]
it's like this:
mostly people natting will do:
iptables -s 192.168.0.0/24 -o eth0 -j MASQUERADE
which means internal traffic on 192.168.3.2 would go outside without being
natted. if someone nearby uses 192.168.3.2 as a local network ip, it would get
martians, since that network is coming from an unexpected source interface.
Yes, but it would go to the ISP gateway and get discarded. Why would it
be seen by anything else on the ISP subnet, unless the NIC were in
promiscuous mode ? And if that (promiscuous mode) were the case, why
would iptables complain ?
