From owner-freebsd-security@FreeBSD.ORG  Wed Sep 24 09:32:53 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3DAD216A4B3
	for <security@freebsd.org>; Wed, 24 Sep 2003 09:32:53 -0700 (PDT)
Received: from tenebras.com (laptop.tenebras.com [66.92.188.18])
	by mx1.FreeBSD.org (Postfix) with SMTP id 08BC644025
	for <security@freebsd.org>; Wed, 24 Sep 2003 09:32:52 -0700 (PDT)
	(envelope-from kudzu@tenebras.com)
Received: (qmail 98633 invoked from network); 24 Sep 2003 16:32:51 -0000
Received: from sapphire.tenebras.com (HELO tenebras.com) (192.168.188.241)
  by laptop.tenebras.com with SMTP; 24 Sep 2003 16:32:51 -0000
Message-ID: <3F71C733.6070708@tenebras.com>
Date: Wed, 24 Sep 2003 09:32:51 -0700
From: Michael Sierchio <kudzu@tenebras.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.4) Gecko/20030624
X-Accept-Language: en-us, zh-tw, zh-cn, fr, en, de-de
MIME-Version: 1.0
To: Ruslan Ermilov <ru@freebsd.org>
References: <200309241429.h8OETrhk097904@freefall.freebsd.org>
	<3F71ADCA.7090408@tenebras.com> <20030924162111.GA23542@sunbay.com>
In-Reply-To: <20030924162111.GA23542@sunbay.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: security@freebsd.org
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:14.arp
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Sep 2003 16:32:53 -0000

Ruslan Ermilov wrote:

> I still have not committed the code that supports static ARP
> on an interface -- there's currently no way to do static ARP
> only, if you disable ARP on an interface it will be disabled
> in its whole.

It's clear to me that turning ARP off on wi0 on my machine
means no gratuitous arp will be xmitted, and no arp messages
will be responded to.  It's also clear that the static arp
entries for the wireless LAN get entered into the table, and
that ARP continues to work on the wired section.

Are you saying I'm hallucinating?