In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >On 17-Mar-05, 01:01 (CST), Joel Aelwyn <[EMAIL PROTECTED]> wrote: >> * The ability for an interface to receive, by default, only traffic that >> is destined for that interface. (Non-promiscuous mode; promiscuous mode >> availability is a big plus, but not required from the OS point of view) > >Linux fails this. Even with forwarding disabled, it will accept packets >for an address on interface A via interface B.
Enable rp_filter and it does reject such packets. echo 1 >/proc/sys/net/ipv4/conf/${dev}/rp_filter -- Blars Blarson [EMAIL PROTECTED] http://www.blars.org/blars.html With Microsoft, failure is not an option. It is a standard feature. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]