> /The problem you ran into above just involves adding the route to the proxy
> arp'ed host. Proxy ARP involves adding a 'neighbor' object for each host.
> And a neighbor is a host, not a network. So Shorewall would have to
> decompose the network into its individual hosts and run 'ip neigh add ...'
> for each host. In my view, that is too ugly to consider; not from the
> programming effort involved, but because it could create a massive number of
> commands to be executed./

Understood.  Thanks for the explanation.
-- 
*Rich Wales*
[email protected]
------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to