From owner-freebsd-hackers  Fri Aug 16 09:12:16 1996
Return-Path: owner-hackers
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id JAA25650
          for hackers-outgoing; Fri, 16 Aug 1996 09:12:16 -0700 (PDT)
Received: from brasil.moneng.mei.com (brasil.moneng.mei.com [151.186.109.160])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id JAA25644
          for <hackers@freefall.freebsd.org>; Fri, 16 Aug 1996 09:12:11 -0700 (PDT)
Received: (from jgreco@localhost) by brasil.moneng.mei.com (8.7.Beta.1/8.7.Beta.1) id LAA15418; Fri, 16 Aug 1996 11:10:53 -0500
From: Joe Greco <jgreco@brasil.moneng.mei.com>
Message-Id: <199608161610.LAA15418@brasil.moneng.mei.com>
Subject: Re: Routed supports variable-length netmasks?
To: nate@mt.sri.com (Nate Williams)
Date: Fri, 16 Aug 1996 11:10:53 -0500 (CDT)
Cc: mnewell@kaizen.net, jgreco@brasil.moneng.mei.com,
        hackers@freefall.freebsd.org
In-Reply-To: <199608161532.JAA06486@rocky.mt.sri.com> from "Nate Williams" at Aug 16, 96 09:32:15 am
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Sender: owner-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > > I use static routing around here with no problems.
> > 
> > I found static routes to be a problem.  If the ppp link goes down and a
> > packet arrives it redirects the route out throught he default; when the
> > link comes back up it doesn't get re-re-directed.   :-(
> > 
> > What we were trying to do is use the /etc/ppp/ip-up and /etc/ppp/ip-down
> > to install static routes, but route won't work for non-root logins.  :-(
> > I remember something about this on the list, but I've not had a chance to
> > research it.  :-(!!
> 
> /etc/ppp/ip-up and /etc/ppp/ip-down are run as root, no matter who the
> login user is.  This also means you must be careful what you put in
> there, but since the environment is safeguarded pretty well it would be
> hard to break into a system via them.

I found under FreeBSD, um, I think 2.0.5R that this didn't work real well
because route did additional checks for root permissions (I believe I got
around it by forcing the uid and euid to 0, or something like that).

It was a tad ugly.  I don't do this anymore anyways - I use SLIP for any
situations requiring routing.

... JG