On Wed, Sep 14, 2005 at 04:40:11PM -0500, eric wrote:
> On Wed, 2005-09-14 at 23:31:25 +0200, Claudio Jeker proclaimed...
> 
> > The man page is not 100% correct for the unicast case.
> > In fact in the unicast case ping just bind()s to the specified address but
> > that does not force the packets to go through that interface -- a normal
> > route lookup is used to find the outgoing interface. In your case the
> > default route which points to bge0.
> > I currently think it is not easy to bypass this limitation.
> 
> Hi Claudio,
> 
> I mostly used ping(8) as an example. I notice the same behavior using nmap's
> "-S <addr>" flag. This ties into the question I posted yesterday regarding
> problems with nmap and nessus. I'm mostly trying to figure out how to
> sending *all* packets out only one interface. What if there was no default
> route on the host?
> 

As I said it is not possible to force a outgoing interface without adding
a host route to the destionation. The only way to do this is using bpf.
For local networks you can use SO_DONTROUTE but this does not work for non
local networks.

-- 
:wq Claudio

Reply via email to