From owner-freebsd-hackers  Sun Dec  5 12:16: 0 1999
Delivered-To: freebsd-hackers@freebsd.org
Received: from tardis.patho.gen.nz (tardis.patho.gen.nz [203.97.2.226])
	by hub.freebsd.org (Postfix) with ESMTP id 4DC6815435
	for <freebsd-hackers@freebsd.org>; Sun,  5 Dec 1999 12:15:56 -0800 (PST)
	(envelope-from jabley@tardis.patho.gen.nz)
Received: (from jabley@localhost)
	by tardis.patho.gen.nz (8.9.3/8.9.3) id JAA04223
	for freebsd-hackers@freebsd.org; Mon, 6 Dec 1999 09:15:55 +1300 (NZDT)
Date: Mon, 6 Dec 1999 09:15:55 +1300
From: Joe Abley <jabley@patho.gen.nz>
To: freebsd-hackers@freebsd.org
Subject: NFS server bound to specific local address
Message-ID: <19991206091552.B31032@patho.gen.nz>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Mailer: Mutt 1.0i
X-Files: the Truth is Out There
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hi,

I've just noticed that (on STABLE, at least) it doesn't seem possible
to run an NFS server on a machine, and have it service requests from
clients talking to anything other than the base address.

For example, if I

  ifconfig fxp0 inet 192.168.0.11
  ifconfig fxp0 inet 192.168.0.16 alias

and then have clients attempt to mount 192.168.0.16:/foo, the clients
will not successfully mount the shared volume; this is (according to
some posts on the subject I found in the -questions archive) because
the client is expecting replies from 192.168.0.16, but the server
is sending them from 192.168.0.16.

This is correct behaviour by the client, since trusting NFS replies
from any old address would be silly.

It seems to me that _my_ requirements would be satisfied if an NFS
request from a client could have its destination address recorded, so
that any replies to that specific request could be sourced from the
address expected by the client.

  Would this obviously break anything else?

  Would this be a security-conscious modification?

  Does -current already do this?

If "no, yes, no" I'll have a look myself. Just keen not to overlap with
anybody else's effort.

-- 
Ua lawa küpono ka hakahaka pä o këia pä malule


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message