> 10.187.185.11 dev eth1 scope link > 129.187.154.0/24 dev eth0 proto kernel scope link src 129.187.154.217 ^^^^^^^^^^^^^^^^^^^^^^^^^^^ > ====================================================================== > root@pc40:/ > arping 192.168.1.254 > ARPING 192.168.1.254 from 129.187.154.153 eth0 ^^^^^^^^^^^^^^^^ arp_filter checks the source address, and the route for that source address is on eth0, so it is perfectly correct. You need to change your routing so that the 129.187.154.153 route goes through eth1 or alternatively add blackhole policy routing with eth0's address as source address. -Andi P.S.: Cross posting this way is very impolite. Don't do it. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html