Hello David, On Sun, Aug 17, 2003 at 10:22:58PM -0700, David S. Miller wrote: > On Mon, 18 Aug 2003 00:48:49 +0200 > Willy Tarreau <willy@w.ods.org> wrote: > > > I have a case where this doesn't work > > And that's exactly what arpfilter is for. That's indeed what I was supposing so. > There are zero performance implications from using > arpfilter too, if that is something people are worried > about. I'm not worried about performance, which I can easily imagine is not affected for such rare events as ARP requests. I'm more worried about how to set it up. I have already searched in Documentation/networking, on google, etc... but didn't find any useful information about how to set up an arpfilter configuration. I'd agree to test it, but don't know where to start from. I even don't know if it's related to 'ip arp'. I guess that's what stops most people from using it. Others may even not be aware that this feature exists at all. Other than that, I don't know if the resulting configuration will still be straightforward or look completely tricky. Again, I don't know what we can break by applying the arp_prefsrc patch, which will do the Right Thing most of the time. And when it won't, the current code would also have required arpfilter anyway. But I'm willing to try arpfilter if you show me where to start from. Cheers, Willy - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
