From owner-freebsd-net@FreeBSD.ORG  Wed Oct 22 04:20:08 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5A2A61065679
	for <freebsd-net@freebsd.org>; Wed, 22 Oct 2008 04:20:08 +0000 (UTC)
	(envelope-from scrappy@hub.org)
Received: from hub.org (hub.org [200.46.204.220])
	by mx1.freebsd.org (Postfix) with ESMTP id 2CADC8FC1C
	for <freebsd-net@freebsd.org>; Wed, 22 Oct 2008 04:20:07 +0000 (UTC)
	(envelope-from scrappy@hub.org)
Received: from localhost (unknown [200.46.204.183])
	by hub.org (Postfix) with ESMTP id 7A50411A2872
	for <freebsd-net@freebsd.org>; Wed, 22 Oct 2008 01:01:40 -0300 (ADT)
Received: from hub.org ([200.46.204.220])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024)
	with ESMTP id 67185-04 for <freebsd-net@freebsd.org>;
	Wed, 22 Oct 2008 01:01:40 -0300 (ADT)
Received: from [192.168.1.2] (blk-224-204-104.eastlink.ca [24.224.204.104])
	by hub.org (Postfix) with ESMTPA id EFCC311A2870
	for <freebsd-net@freebsd.org>; Wed, 22 Oct 2008 01:01:39 -0300 (ADT)
Date: Wed, 22 Oct 2008 01:01:39 -0300
From: "Marc G. Fournier" <scrappy@hub.org>
To: freebsd-net@freebsd.org
Message-ID: <AAF0D5CFDA1476A1AF36A900@ganymede.hub.org>
X-Mailer: Mulberry/4.0.8 (Linux/x86)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: tap devices ... restricting IP?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Oct 2008 04:20:08 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Is it possible to assign an IP to a tap device, used by something like QEMU, 
such that someone *inside* the QEMU environment can't modify?  Or, if they do 
modify their own IP, the network inside of QEMU will break, as the internal IP 
doesn't match what is attached to  tap?

I'm not seeing anything to that effect in the tap manual, but the part talking 
about 'control' seems to indicate that you can do this ...

- -- 
Marc G. Fournier        Hub.Org Hosting Solutions S.A. (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkj+paMACgkQ4QvfyHIvDvPMRQCdH0hfp3Gp0N4bHwmAvgrNEOlh
lRUAoKBA9xzk7umZ782fsODzGH9FpNpM
=REoF
-----END PGP SIGNATURE-----