From owner-freebsd-net@FreeBSD.ORG  Mon Oct 10 12:02:43 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@FreeBSD.org
Delivered-To: freebsd-net@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0CC3F16A41F
	for <freebsd-net@FreeBSD.org>; Mon, 10 Oct 2005 12:02:43 +0000 (GMT)
	(envelope-from tbyte@otel.net)
Received: from mail.otel.net (gw3.OTEL.net [212.36.8.151])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0ECA543D49
	for <freebsd-net@FreeBSD.org>; Mon, 10 Oct 2005 12:02:40 +0000 (GMT)
	(envelope-from tbyte@otel.net)
Received: from dragon.otel.net ([212.36.8.135])
	by mail.otel.net with esmtp (Exim 4.30; FreeBSD) id 1EOwMZ-0002xX-CT
	for freebsd-net@FreeBSD.org; Mon, 10 Oct 2005 15:02:39 +0300
From: Iasen Kostov <tbyte@otel.net>
To: freebsd-net@FreeBSD.org
In-Reply-To: <20051010103216.GP14542@cell.sick.ru>
References: <1128697135.71975.24.camel@DraGoN.OTEL.net>
	<20051010103216.GP14542@cell.sick.ru>
Content-Type: text/plain
Date: Mon, 10 Oct 2005 15:02:39 +0300
Message-Id: <1128945759.11704.5.camel@DraGoN.OTEL.net>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3 FreeBSD GNOME Team Port 
Content-Transfer-Encoding: 7bit
Cc: 
Subject: Re: Proxy arp should only replay on specified interface.
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Oct 2005 12:02:43 -0000

On Mon, 2005-10-10 at 14:32 +0400, Gleb Smirnoff wrote:
>   Iasen,
> 
> On Fri, Oct 07, 2005 at 05:58:55PM +0300, Iasen Kostov wrote:
> I> 	IMHO proxy arp should only replay on specified interface not on every
> I> arp capable interface which recieved request for the proxied address.
> I> If lets say host A have arp capable if0 and if1 interfaces and U set:
> I> 	route add -host 1.0.0.2 -iface if1 -proxy
> I> 
> I> and then a request is recieved on if0 for 1.0.0.2, host A will replay
> I> that it has it (which IMHO is wrong as the proxy route is set for if1).
> I> 
> I> 	This sometimes is a big problem for our PPPoE/VPN server when the
> I> client uses linux or some small routers (e.g Linksys or something)
> I> probably linux based. It happen that sometimes (when the link is down or
> I> god knows why) it broadcasts arp "who-has" and the gateway replays. Then
> I> this host try to use ethernet path and not the (right) tunnel path until
> I> arp cache expires (which is not real fun as there is firewall rules
> I> blocking ethernet path :)).
> I> 
> I> 	And even worse :) - I can think of ways to bypass routing protocols
> I> using proxy-arp routes like the one mentioned above. But it will not
> I> work if proxy-arp behaves the way it does now.
> I> 	And 1 thing more - there could be a switch which restores (or turns on)
> I> old behavior.
> I> 
> I> (patch agains 5.4-STABLE is attached)
> 
> Isn't this what you need?
> 
> http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/if_ether.c?rev=1.140&content-type=text/x-cvsweb-markup
> 
	Exactly :). Thanks. This probably won't make it into 5.x but its good
to know that it's fixed :)
        
        regards.