netdev - RE: ebtables on a stick

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 2 Dec 2011 10:20:01 -0600
From:	"Greg Scott" <GregScott@...rasupport.com>
To:	"Michal Soltys" <soltys@....info>
Cc:	"David Lamparter" <equinox@...c24.net>, <netdev@...r.kernel.org>
Subject: RE: ebtables on a stick

OK.  But I dunno....  I set eth0 on the router with the same address as
the real host behind it on eth1.  So something comes in on eth0 for
1.2.115.157.  The router has that as its own address now, plus a route
to somebody else with the same address on eth1.  But as far as the
router/firewall is concerned, that packet is already delivered - why
would it forward it out on eth1?

- Greg



-----Original Message-----
From: Michal Soltys [mailto:soltys@....info] 
Sent: Friday, December 02, 2011 10:16 AM
To: Greg Scott
Cc: David Lamparter; netdev@...r.kernel.org
Subject: Re: ebtables on a stick

On 11-12-02 17:06, Greg Scott wrote:
>>  You should be able to avoid whole proxy thing altogether (on your
> router), by doing:
>>
>>  ip add add 1.2.115.157/32 dev eth0
>>  ip ro del table local 192.168.99.5/32 dev eth0 ip route add
> 1.2.115.157/32 dev eth1
>
> What's the 192.168.99.5/21 address?
>

Should be 1.2.115.157/32 (hasty copy paste).
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html