Date: Thu, 24 Mar 2005 14:20:12 +0200 From: Lefteris Tsintjelis <lefty@ene.asda.gr> To: freebsd-stable@freebsd.org Subject: Denied broadcast packets in same interface with antispoofing Message-ID: <4242B07C.DD76A610@ene.asda.gr>
next in thread | raw e-mail | index | archive | help
FreeBSD 5.4-PRERELEASE #0: Thu Mar 17 16:41:58 EET 2005
${fwcmd} add 400 deny log ip from any to any not antispoof in
rl2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.0.97 netmask 0xffffffe0 broadcast 192.168.0.127
/var/log/security:
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.96 in via rl2
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.96 in via rl2
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.127 in via rl2
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.127 in via rl2
ipfw: 400 Deny UDP 192.168.0.97:123 192.168.0.127:123 in via rl2
Why are broadcast packets originating from the same interface are denied
access? Am I missing something here?
Thanks in advance,
Lefteris Tsintjelis
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4242B07C.DD76A610>