Re: Is 'publish' proxy arp still broken ?

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



David Boreham wrote:
> 
> Can't get proxy arp with arp -s <IPaddr> <MACaddr> pub
> to work with a 2.4 kernel. I see some evidence in the archive
> that this was broken in the 2.0.x timeframe and never fixed.
> 
> Anyone know for sure if it's broken or working ?

It is working if you don't try to pass a MAC:
arp -s IPADDRESS -i INTERFACE -D INTERFACE pub

To delete:
arp -d IPADDRESS -i INTERFACE pub

http://linux-ip.net/html/scripts/proxy-arp

With a proper ip route, it is probably not necessary:
> NS="206.XXX.89.158/32"
> GW="206.XXX.89.153"
> BRD="206.XXX.89.159"
> YIC="206.XXX.89.154/32"
> NEWS="206.XXX.89.155/32"
> SON="206.XXX.89.156/32"
> NOP="206.XXX.89.157/32"
> IFI="eth0"
> IFE="eth1"
> IPNS="206.72.XXX.158"
>     ifconfig lo 127.0.0.1
>     route add -net 127.0.0.0 netmask 255.0.0.0 lo
>     /etc/rc.d/rc.netdevice
>     ip link set dev $IFE up
>     ip address add dev $IFE local $NS broadcast $BRD
>     ip link set dev $IFI up
>     ip address add dev $IFI local $NS broadcast $BRD
> 
>     ip route add $YIC  dev $IFI src $IPNS
>     ip route add $NEWS dev $IFI src $IPNS
>     ip route add $SON  dev $IFI src $IPNS
>     ip route add $NOP  dev $IFI src $IPNS
>     ip route add $GW   dev $IFE src $IPNS
>     ip route add 0/0 via $GW dev $IFE src $IPNS
> 
> # we want proxyARP:
>   echo 1 >/proc/sys/net/ipv4/conf/$IFE/proxy_arp
>   echo 1 >/proc/sys/net/ipv4/conf/$IFI/proxy_arp
> 
> # turn on ip forwarding
>   echo 1 >/proc/sys/net/ipv4/ip_forward
> 
> # Decide what to do about rp_filter.
> # turn on antispoofing protection
> #Off 23Oct04 for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 1 >$f; done

gypsy
_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux