netdev - Re: ebtables on a stick

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 02 Dec 2011 16:40:13 +0100
From:	Michal Soltys <soltys@....info>
To:	Greg Scott <GregScott@...rasupport.com>
Cc:	David Lamparter <equinox@...c24.net>, netdev@...r.kernel.org
Subject: Re: ebtables on a stick

On 11-12-01 17:56, Greg Scott wrote:
>>  # ip -4 a l eth0; ip r l match 0.0.0.0; ip r l exact 10.255.255.1
>>  2: eth0:<BROADCAST,MULTICAST,UP,LOWER_UP>  mtu 1500 qdisc pfifo_fast
>>  state UNKNOWN qlen 1000
>>      inet 87.106.131.203/32 scope global eth0
>>  default via 10.255.255.1 dev eth0
>>  10.255.255.1 dev eth0  scope link

Aside from addresses, same config I had when I was on adsl.

>
> Wow, how does that even work?  Every time I think I know something, I
> get challenged.  I should make that a slogan.
>
> - Greg
>

BTW:

You should be able to avoid whole proxy thing altogether (on your 
router), by doing:

ip add add 1.2.115.157/32 dev eth0
ip ro del table local 192.168.99.5/32 dev eth0
ip route add 1.2.115.157/32 dev eth1

instead of:

ip neigh add proxy 1.2.115.157 dev eth0

The former will still expose the address, but it will be not routable 
inside the router, so will get passed to your internal host. (this 
assumes your kernel is compiled with advanced routing).
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html