On Tue, 19 Aug 2003 19:10:10 +0200 Stephan von Krawczynski <skraw@ithnet.com> wrote: > Well, then you have a problem, at least with RFC-985 as quoted in my other > email. RFC-985 does not take into consideration a system model where IP addresses are owned by the host not specific interfaces which is a valid system model that the RFC standards allow. > <quote RFC-985> > An ARP request is discarded if the source IP address is not in the same subnet. > </quote> This RFC is broken in an environment consistent of systems using the host address ownership model. It also doesn't consider cases where the host receiving the ARP request is not aware of all subnets present on a LAN. Ignoring such ARPs is therefore broken and prevents valid communications from occuring. Some systems implement this check to provide "pseudo security", but it isn't even that. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
