Gleb Smirnoff wrote:
...
Moreover, in case of promisc + net.inet.ip.forwarding=1 our box will resend
all the received foreign packets :(

NetBSD has M_PROMISC presumably for detecting situations like this:
   http://fxr.watson.org/fxr/ident?v=NETBSD&i=M_PROMISC

What do you think about checking that (ether_dhost == ours || BCAST || MCAST)
before sending packet to ether_demux?
Not complete; we could be acting as an ARP proxy or even a Layer 2 proxy.

I have to run out the door to run some errands, but the above link is a start.

All the best,
BMS
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to