[pfSense Support] Securing CARP

[Randy B]

I know that CARP encrypts it's messages, but I'm using it to provide a 
virtual IP on a network that I'd rather consider actively hostile.  As 
such, I'd like to eliminate any non-essential communication on that link 
- especially multicast management packets that could well be intercepted 
and eventually used to compromise or infiltrate the system.  Any ideas 
on how to force CARP to send it's management/sync multicasts out a 
secured port?  Will CARP even work thereafter, or MUST it have those 
packets on that specific interface?

RB
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]