Re: NOARP - gateway must answer and have frozen ARP table

2004-09-24 Thread Bill Fenner
Garrett and I discussed what IFF_NOARP should mean about 4-5 years ago; we decided that it probably menat "no ARP". We discussed the idea of seperating it out into two flags; "Don't reply to ARP" and "don't pay attention to ARP" but decided to wait and see what people thought. 4-5 years is proba

Static ARP (was: Re: NOARP - gateway must answer and have frozen ARP table)

2002-12-26 Thread Ruslan Ermilov
On Sat, Dec 08, 2001 at 02:33:31PM +0700, Eugene Grosbein wrote: > > OK, I have a proposal that should fit both opinions. I'll keep the > > net.link.ether.inet.static_arp to mean what it means now (keep ARP > > table static, no updates except from local process through a routing > > socket writes)

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-07 Thread Eugene Grosbein
> If this is really want to do, I believe you can do it with existing > tools. > > For simplicity, I'm just going to illustrate a way to set it up rather > than explain it. Store your IP-MAC address pairs in flat file as > proscribed in arp(8), > > 192.168.10.201:02:03:10:11:12 >

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-07 Thread Eugene Grosbein
> OK, I have a proposal that should fit both opinions. I'll keep the > net.link.ether.inet.static_arp to mean what it means now (keep ARP > table static, no updates except from local process through a routing > socket writes), and will add another sysctl that will switch the > meaning of IFF_NOAR

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-07 Thread Ruslan Ermilov
On Thu, Dec 06, 2001 at 12:59:39PM -0800, Bill Fenner wrote: > > Garrett and I discussed what IFF_NOARP should mean about 4-5 years > ago; we decided that it probably menat "no ARP". We discussed > the idea of seperating it out into two flags; "Don't reply to ARP" > and "don't pay attention to A

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-06 Thread Crist J . Clark
On Thu, Dec 06, 2001 at 12:59:39PM -0800, Bill Fenner wrote: > > Garrett and I discussed what IFF_NOARP should mean about 4-5 years > ago; we decided that it probably menat "no ARP". We discussed > the idea of seperating it out into two flags; "Don't reply to ARP" > and "don't pay attention to A

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-06 Thread Bill Fenner
Garrett and I discussed what IFF_NOARP should mean about 4-5 years ago; we decided that it probably menat "no ARP". We discussed the idea of seperating it out into two flags; "Don't reply to ARP" and "don't pay attention to ARP" but decided to wait and see what people thought. 4-5 years is prob

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Eugene Grosbein
On Wed, Dec 05, 2001 at 07:38:59PM +0200, Ruslan Ermilov wrote: > The below patch implements this facility, activated by setting the > net.link.ether.inet.static_arp sysctl to a non-zero value. It also > fixes an mbuf leak in arpresolve() if IFF_NOARP flag is set on an > interface, and an addres

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Crist J . Clark
On Wed, Dec 05, 2001 at 01:52:48PM -0500, Louis A. Mamakos wrote: > > On Wed, Dec 05, 2001 at 01:35:52PM -0500, Louis A. Mamakos wrote: > > > Doesn't this behavior need to be on a per-interface basis? I'm wondering > > > if a single sysctl is sufficient to get the desired effect. > > > > > No, w

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Louis A. Mamakos
> On Wed, Dec 05, 2001 at 01:35:52PM -0500, Louis A. Mamakos wrote: > > Doesn't this behavior need to be on a per-interface basis? I'm wondering > > if a single sysctl is sufficient to get the desired effect. > > > No, we want ARP table to stay intact no matter which interface > sends us an upda

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Ruslan Ermilov
On Wed, Dec 05, 2001 at 01:35:52PM -0500, Louis A. Mamakos wrote: > Doesn't this behavior need to be on a per-interface basis? I'm wondering > if a single sysctl is sufficient to get the desired effect. > No, we want ARP table to stay intact no matter which interface sends us an update. Cheers

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Louis A. Mamakos
Doesn't this behavior need to be on a per-interface basis? I'm wondering if a single sysctl is sufficient to get the desired effect. louie To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Ruslan Ermilov
On Wed, Dec 05, 2001 at 07:38:59PM +0200, Ruslan Ermilov wrote: > On Wed, Dec 05, 2001 at 11:17:35PM +0700, Eugene Grosbein wrote: > > On Wed, Dec 05, 2001 at 04:03:16AM -0800, Crist J . Clark wrote: > > > > > > Not sure what is correct list, this is about network security. > > > > Flag NOARP did

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Ruslan Ermilov
On Wed, Dec 05, 2001 at 11:17:35PM +0700, Eugene Grosbein wrote: > On Wed, Dec 05, 2001 at 04:03:16AM -0800, Crist J . Clark wrote: > > > > Not sure what is correct list, this is about network security. > > > Flag NOARP did not work for ethernet interface before 4.4-RELEASE. > > > We needed stati

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Eugene Grosbein
On Wed, Dec 05, 2001 at 04:03:16AM -0800, Crist J . Clark wrote: > > Not sure what is correct list, this is about network security. > > Flag NOARP did not work for ethernet interface before 4.4-RELEASE. > > We needed static ARP table so used local patch for it. > > 4.4-RELEASE implemented NOARP b

Re: NOARP - gateway must answer and have frozen ARP table

2001-12-05 Thread Crist J . Clark
On Wed, Dec 05, 2001 at 12:44:30PM +0700, Eugene Grosbein wrote: > Hi! > Not sure what is correct list, this is about network security. > > Flag NOARP did not work for ethernet interface before 4.4-RELEASE. > We needed static ARP table so used local patch for it. > 4.4-RELEASE implemented NOARP b

NOARP - gateway must answer and have frozen ARP table

2001-12-04 Thread Eugene Grosbein
Hi! Not sure what is correct list, this is about network security. Flag NOARP did not work for ethernet interface before 4.4-RELEASE. We needed static ARP table so used local patch for it. 4.4-RELEASE implemented NOARP but in the different way. Now a router even does not respond to clients askin