>>>>> "catls" == catls <catls@xxxxxxxxx> writes:
catls> Director gets packet on INTERNAL interface and since
catls> spoofing is disabled does not bother?(part am not sure
catls> about?).Since the packet does not have a destination field
catls> to its interfaces it just sends it out of the default
catls> gateway no? If spoofing check is disabled in linux by not
catls> putting a "1" in the /proc/sys/net/ipv4/conf/all/rp_filter
catls> this should work no?
No. The director kernel will still drop these packets as the have a
source address matching a local interface. They're known as martians.
Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx> wrote a patch which
disables this feature when packet spoofing is diabled. If you can't
find it in the list archives (are there list archives, anyone?), let
me know & I'll see what I did with it.
--
Stephen
"Farcical aquatic ceremonies are no basis for a system of government!"
|