Re: [BUG?] unwanted proxy arp in 2.4.19-pre10

Bill Davidsen (davidsen@tmr.com)
Mon, 15 Jul 2002 06:39:30 -0400 (EDT)


On Sun, 14 Jul 2002, David S. Miller wrote:

> From: Bill Davidsen <davidsen@tmr.com>
> Date: Sun, 14 Jul 2002 21:39:12 -0400 (EDT)
>
> Clearly FAQ means frequently asked, not answered. I can't find the
> appropriate patch, clearly some people regard allowing source routing to
> be a benefit.
>
> Source routing exists in every single 2.4.x kernel every released.
> What are you talking about? There is no patch to speak of, it's
> already there.

Um, many people who are being probed from the Internet would like very
much to NOT have it there, certainly by default. And would like to send an
arp request and in return get a valid mac address.

I totally miss why anyone would consider this behaviouracceptable, much
less desirable. Perhaps you or someone could explain why either accepting
source routing or sending out invalid arp responses are desirable at all,
much less as default behaviour. One is a security hole, the other brings
the network group to the door with arpwatch output.

After some hours of reading the google results I see lots of questions, a
few dubious workarounds, and zero people claiming that it's a good thing
to work that way.

-- 
bill davidsen <davidsen@tmr.com>
  CTO, TMR Associates, Inc
Doing interesting things with little computers since 1979.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/