Date: Wed, 21 Aug 2002 16:13:28 -0700 From: "Crist J. Clark" <crist.clark@attbi.com> To: Lars Eggert <larse@ISI.EDU> Cc: Barney Wolff <barney@tp.databus.com>, net@FreeBSD.org Subject: Re: Bridging when one interface has no carrier Message-ID: <20020821231328.GA74544@blossom.cjclark.org> In-Reply-To: <3D613D5B.10507@isi.edu> References: <3D61224B.2020902@isi.edu> <20020819102951.A38869@iguana.icir.org> <3D612D6A.9020604@isi.edu> <20020819181919.GA9000@tp.databus.com> <3D613D5B.10507@isi.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Aug 19, 2002 at 11:47:55AM -0700, Lars Eggert wrote:
> Barney Wolff wrote:
> >I don't recall that FreeBSD has ever had the "strong host model"
> >property and (as I just confirmed by test) it doesn't have it now.
>
> For IP, it doesn't, and never has. Packets destined for any local IP
> address are accepted (by IP), no matter which interface the come in over.
We have had,
net.inet.ip.check_interface
Which does,
/*
* XXX - Setting ip_checkinterface mostly implements the receive side of
* the Strong ES model described in RFC 1122, but since the routing table
* and transmit implementation do not implement the Strong ES model,
* setting this to 1 results in an odd hybrid.
*
* XXX - ip_checkinterface currently must be disabled if you use ipnat
* to translate the destination address to another local interface.
*
* XXX - ip_checkinterface must be disabled if you add IP aliases
* to the loopback interface instead of the interface where the
* packets for those addresses are received.
*/
For a while now.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020821231328.GA74544>