Gerry George wrote:
> Can I ask why this is so?  What is the logic behind this
> change.  I just
> wish to understand how ppp does its stuff.

Hi Gerry,

Please read the pppd man page for their reasons for the change.

Oversimplified:

It's a security precaution to avoid your machine being used as a relay
without your consent.

It is assumed that a machine with a default route in place is a network
machine.  (It's the most common reason for a default route after all.)  The
other end of the call has full access to routing through your machine (don't
forget: forward, input and output chains default to accept).  So for
accountability, the other end of the connection needs to log into your
system (so transactions can be traced to a valid user id) or you (root) need
to override that setting.

Otherwise, can't you just see the possibilities where "XYZ" company has a
24x7 DSL connection to the net and right before going home "Joe" dials out
to his home machine?

Lourdes


-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to