* Claudio Jeker <cje...@diehard.n-r-g.com> [2011-08-05 08:46]: > On Thu, Aug 04, 2011 at 11:23:44PM +0200, Alexander Bluhm wrote: > > On Thu, Aug 04, 2011 at 05:06:24PM +0200, Mike Belopuhov wrote: > > > I'm not sure it's a desired behavior and afaik it's not possible > > > to achieve this with IPv4 sockets without the need to be a root. > > > Do we want to change that? > > > > Yes. KAME fixed that, too. > > > > > The following change restricts it to the locally configured > > > addresses. Is it a way to go? > > > > I would prefer to take as much as possible from the KAME solution. > > No need to introduce more differently implemented code. > > Ugh, you want to take the zone crap from KAME? It is just yet another > layer of steaming bullshit added on top of an already huge dunghill.
and, seriously, "don't diverge from KAME" is bullshit anyways, given how much we diverged already. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting