> > Under Linux, by default, IP addresses are owned by the system > > not by interfaces. > > Folks, the above is the punch line. I am just going over all emails on > this thread and i see this point being missed. > People are quoting tons of RFCs while the really important point being > missed is the above line. If that is true, then source routing would not work either: it would just route it back to the host, select the next hop, and choose based on destination routing tables. There would be no way to know which IP address is bound to which interface. If that is true, then then having multiple network interfaces on a segment would in effect mean that you have one IP address on multiple interfaces. As Alan mentioned that is an illegal configuration. If that is true, seperation of firewall interfaces is impossible. All of which isn't the case. I'll let it rest for now. I don't think quoting rfc's, pointing out that it doesn't confirm to any reference implementation of IP, or any argument are going to help. This is not a case where technical merits win. This is politics. I don't care anymore. Regards, Bas - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html