From owner-freebsd-security  Fri Dec  7 23:35:52 2001
Delivered-To: freebsd-security@freebsd.org
Received: from D00015.dialonly.kemerovo.su (www2.svzserv.kemerovo.su [213.184.65.86])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2FEB137B419; Fri,  7 Dec 2001 23:35:43 -0800 (PST)
Received: from svzserv.kemerovo.su (localhost.dialonly.kemerovo.su [127.0.0.1])
	by D00015.dialonly.kemerovo.su (8.11.6/8.11.4) with ESMTP id fB87XVU01155;
	Sat, 8 Dec 2001 14:33:31 +0700 (KRAT)
	(envelope-from eugen@svzserv.kemerovo.su)
Message-ID: <3C11C24B.A980A646@svzserv.kemerovo.su>
Date: Sat, 08 Dec 2001 14:33:31 +0700
From: Eugene Grosbein <eugen@svzserv.kemerovo.su>
Organization: SVZServ
X-Mailer: Mozilla 4.76 [ru] (X11; U; FreeBSD 4.4-STABLE i386)
X-Accept-Language: ru, en
MIME-Version: 1.0
To: Ruslan Ermilov <ru@FreeBSD.ORG>
Cc: net@FreeBSD.ORG, security@FreeBSD.ORG
Subject: Re: NOARP - gateway must answer and have frozen ARP table
References: <20011205124430.A83642@svzserv.kemerovo.su> <20011205040316.H40864@blossom.cjclark.org> <20011205231735.A1361@grosbein.pp.ru> <20011205193859.B79705@sunbay.com> <200112051835.fB5IZqH95521@whizzo.transsys.com> <20011205204526.B89520@sunbay.com> <200112051852.fB5IqmH95809@whizzo.transsys.com> <20011205121928.A3061@blossom.cjclark.org> <200112062059.MAA02282@windsor.research.att.com> <20011207110542.J13705@sunbay.com>
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> OK, I have a proposal that should fit both opinions.  I'll keep the
> net.link.ether.inet.static_arp to mean what it means now (keep ARP
> table static, no updates except from local process through a routing
> socket writes), and will add another sysctl that will switch the
> meaning of IFF_NOARP from "no arp" to "static arp on this interface".
> How about this?

This would be the best souliution at least for us :-)

Eugene Grosbein

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message