netdev - Re: [RFC] arp announce, arp_proxy and windows ip conflict verification

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200907031402.34941.denys@visp.net.lb>
Date:	Fri, 3 Jul 2009 14:02:34 +0300
From:	Denys Fedoryschenko <denys@...p.net.lb>
To:	"Eric W. Biederman" <ebiederm@...ssion.com>
Cc:	netdev@...r.kernel.org, David Miller <davem@...emloft.net>
Subject: Re: [RFC] arp announce, arp_proxy and windows ip conflict verification

On Friday 03 July 2009 06:14:44 Eric W. Biederman wrote:

Actually problem doesn't worth a broken egg even.
I am not confused. Just i am trying to explain that some feature 
implementation must follow standards somehow, especially because it break 
things. And it breaks. Actual use for proxy_arp in modern world is very small, 
and i think it is used rarely, only for PPP links for remote customers. But 
even in this case it will break things, if this box have default gateway.

1)If Linux have default gateway configured "some other" interface, enabling 
proxy_arp on ethernet interface will break communication for any network that 
is not configured on this Linux interface. It will just give ARP reply for 
all ARP requests.

2)ACD (Address conflict detection) used in DHCP, Mobile IP and etc, and it 
uses gratituous ARP/ARP Announce. 
Proxy ARP used to help route networks. 
Gratituous ARP/ARP Announce packet have no use for routing, it is for ACD and 
ARP cache updating (for clusters). Linux ARP proxy gives answer to such 
packets, which doesn't have use for routing, but breaks ACD (gives false 
positive ip conflict).

Anyway, i ask advice from one of RFC authors. I will forward it here as soon 
as receive it.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html