| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 25 Oct 2013 10:24:12 +0200 From: François Cachereul <f.cachereul@...halink.fr> To: Benjamin LaHaise <bcrl@...ck.org> CC: James Chapman <jchapman@...alix.com>, Paul Mackerras <paulus@...ba.org>, netdev@...r.kernel.org, linux-ppp@...r.kernel.org Subject: Re: [RFC PATCH net-next] ppp: Allow ppp device connected to an l2tp session to change of namespace On 10/24/2013 05:53 PM, Benjamin LaHaise wrote: > On Thu, Oct 24, 2013 at 04:43:42PM +0100, James Chapman wrote: >> I'm thinking about the implications of a skb in the net namespace of the >> ppp interface passing through a tunnel socket which is in another >> namespace. I think net namespaces are completely isolated. >> >> To keep your ppp interfaces isolated from each other, have you >> considered using netfilter to prevent data being passed between ppp >> interfaces? > > Using network namespaces for this is far more efficient. We've already > added support for doing this to other tunneling interfaces. This approach > also makes creating VPNs where there is re-use of the private address space > between different customers far easier to implement. > > -ben That's indeed on of the problems we have to deal with and net namespaces seems to be the right answer. François -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists