Jan Engelhardt a écrit : > On Friday 2010-08-20 00:04, Pascal Hambourg wrote: >>>>>> >>>>> Linux xx.xx.xx.xx 2.6.18-194.8.1.el5xen #1 SMP Thu Jul 1 19:41:05 EDT >>>>> 2010 x86_64 x86_64 x86_64 GNU/Linux >>>>> >>>> As I expected. A change occured in 2.6.21, recent kernels automatically >>>> link interfaces to the IP stack. >>>> >>> So in my case, am I at a disadvantage >> On the contrary, the old behaviour is an advantage if you don't want an >> interface to participate in IP operation. > > Well not really, there is always iptables and ebtables. Ebtables is available only on bridge interfaces. Here the interface is a bridge, but what if you don't want IP on a normal interface ? Also, iptables won't disable ARP so arptables is required too. Isn't there a cleaner way to "detach" an interface from the IP stack ? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html