On Wed, Feb 13, 2002 at 10:50:13AM -0500, Garrett Wollman wrote: > <<On Wed, 13 Feb 2002 11:03:47 +0200, Ruslan Ermilov <[EMAIL PROTECTED]> said: > > > Please test with and without this patch. > > I continue to believe that this should be done by fixing the routing, > not by adding additional hacks to the already-bloated ip_output() > path. > BSD always had these "hacks" (rfc1122 requirements) in in_canforward(). RFC1122 requires the host to not send 127/8 addresses out of loopback, whether or not its routes are set up correctly.
Cheers, -- Ruslan Ermilov Sysadmin and DBA, [EMAIL PROTECTED] Sunbay Software AG, [EMAIL PROTECTED] FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message