Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

[Daniel Ouellet]

If I may ask. One part of my original question was if the CARP interface 
is view as a bridge setup as far as Sync Proxy is concern. Is it the 
case here? What I understand of the FaQ is clear for not working on 
bridge setup, however, it's not clear to me if CARP setup is view as 
bridge as well. The FaQ explain that forward to different interface 
woudl be bridge and as such not allow Sync Proxy setup in PF. However, 
CARP is virtual interface, but run locally there. So, does it apply or not?

Thanks for clarifying this to me. really fussy in my mind. One side say, 
yes, one side say may be not, tests show no, but I wonder if I am doing 
something wrong in my tests, but in the end, I really do not know for sure.