Re: me in ipfw rules - does it include aliases?

2009-09-08 Thread Nikos Vassiliadis
Tom Worster wrote: the ipfw man page says: me matches any IP address configured on an interface in the system. which suggests that if i code my rules using me then when i add an alias ip address to an interface with ifconfig, these me rules will immediately work for the newly added address

Re: me in ipfw rules - does it include aliases?

2009-09-08 Thread Nikos Vassiliadis
Tom Worster wrote: thanks, nikos. You're welcome. i'm interested in your other comment about the risks of using me. All I am saying is that you have to take care of attacks which use me addresses. Packets with source address a me address coming from a network interface, AKA spoofed

Re: me in ipfw rules - does it include aliases?

2009-09-08 Thread Tom Worster
On 9/8/09 2:58 AM, Nikos Vassiliadis nvass9...@gmx.com wrote: Tom Worster wrote: the ipfw man page says: me matches any IP address configured on an interface in the system. which suggests that if i code my rules using me then when i add an alias ip address to an interface with

me in ipfw rules - does it include aliases?

2009-09-07 Thread Tom Worster
the ipfw man page says: me matches any IP address configured on an interface in the system. which suggests that if i code my rules using me then when i add an alias ip address to an interface with ifconfig, these me rules will immediately work for the newly added address as they do for other