From owner-freebsd-security@FreeBSD.ORG Fri Jul 1 13:12:10 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1244516A41C for ; Fri, 1 Jul 2005 13:12:10 +0000 (GMT) (envelope-from vova@vbook.fbsd.ru) Received: from vbook.fbsd.ru (swsoft-mipt-nat.sw.ru [195.214.233.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id BA3B443D49 for ; Fri, 1 Jul 2005 13:12:09 +0000 (GMT) (envelope-from vova@vbook.fbsd.ru) Received: from vova by vbook.fbsd.ru with local (Exim 4.51 (FreeBSD)) id 1DoLJL-00035B-E5; Fri, 01 Jul 2005 17:12:03 +0400 From: Vladimir Grebenschikov To: shiner chen In-Reply-To: <20050701122603.39773.qmail@web15509.mail.cnb.yahoo.com> References: <20050701122603.39773.qmail@web15509.mail.cnb.yahoo.com> Content-Type: text/plain; charset=KOI8-R Content-Transfer-Encoding: quoted-printable Organization: SWsoft Date: Fri, 01 Jul 2005 17:12:02 +0400 Message-Id: <1120223522.1232.11.camel@localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 FreeBSD GNOME Team Port Sender: Vladimir Grebenschikov Cc: freebsd-security@freebsd.org Subject: Re: how to ignore the arp request for the alias ip in freebsd X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: vova@fbsd.ru List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jul 2005 13:12:10 -0000 =F7 =D0=D4, 01/07/2005 =D7 20:26 +0800, shiner chen =D0=C9=DB=C5=D4: > I want only to ignore the arp request for alias ip ,at the same time I d= on't want disable the arp function of the interface ? How do ? thanks!=20 Probably you need to assign this ip on loopback interface.=20 This address will no more used for arp, but still can be accessible if there is route (IPv4 gw based or LLaddr gw based) for other hosts on ethernet. But, there is some drawbacks also - source IP address autoselect will not chose this IP when you connection to other host. --=20 Vladimir B. Grebenschikov vova@fbsd.ru