I've been thinking about this all day...

Thus spake Jesper Skriver <[EMAIL PROTECTED]> [23:53:26 11/12/03:
: > +   /*
: > +    * Only unicast IP, not from loopback, no L2 or IP broadcast,
: > +    * no multicast, no INADDR_ANY
: > +    */
: > +   if ((m->m_pkthdr.rcvif->if_flags & IFF_LOOPBACK) ||
: > +       (ntohl(ip->ip_src.s_addr) == (u_long)INADDR_BROADCAST) ||
: 
: #jesper
: You will never see packets with a multicast source address.

Do you mean:

Any packets with a multicast source address will be dropped by the kernel
before this point, or that no host will ever send a packet with a
multicast source address?

In the former, that's fine.  In the latter, how does one guarantee that
there isn't a malicious host out there sending spoofed multicast-source
packets?

  - Damian
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to