On 1/23/20 10:53 AM, Eero Volotinen wrote:
> https://www.google.fi/amp/s/blog.cloudtrooper.net/2017/09/19/setting-up-31-interfaces-and-bgp-on-a-centos-machine/amp/
> 
> it should work. follow the guide.
> 

I suspect that there will be anomalies with Shorewall, however, because
both IP addresses will be broadcast addresses (one the network address
and the other the network broadcast address).

teastep@Asus:~/shorewall/web$ shorewall ipcalc 68.140.187.76/31
   CIDR=68.140.187.76/31
   NETMASK=255.255.255.254
   NETWORK=68.140.187.76
   BROADCAST=68.140.187.77
teastep@Asus:~/shorewall/web$

So, for example, the dropBcast action will drop all traffic to either
address. That can be fixed, but it will take a change to the Shorewall
code to special-case /31.

Also, the 'nosmurfs' interface option cannot be used as it will cause
all packets with the gateway address as the source IP to be dropped.

-Tom
-- 
Tom Eastep        \ Q: What do you get when you cross a mobster
Shoreline,         \    with an international standard?
Washington, USA     \ A: Someone who makes you an offer you
http://shorewall.org \    can't understand
                      \________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to