From: Grant Taylor <gtaylor@riverviewtech.net>
To: netfilter@lists.netfilter.org
Subject: Re: NAT on stateless firewall ?
Date: Fri, 03 Aug 2007 15:51:51 -0500 [thread overview]
Message-ID: <46B39567.5080004@riverviewtech.net> (raw)
In-Reply-To: <46B38856.1020003@andrei.myip.org>
On 08/03/07 14:56, Florin Andrei wrote:
> arp -s XXX.YYY.ZZZ.KKK -i eth0 -D eth0 pub
Remember that ARP (cache) entries are just to tell a host where (what
MAC) an IP address (on the same subnet) is at so that the local host
does not have to ARP for it.
> I tested it, but it doesn't seem to work. I see the ARP requests, but
> the server does not respond to it.
Just because traffic may be coming to the correct MAC address, there is
no guarantee that any thing will be listening or responding at that MAC
address for the IP address in question. You would actually have to bind
the IP to the MAC for any thing of value to happen out side of sniffing.
Grant. . . .
next prev parent reply other threads:[~2007-08-03 20:51 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-08-02 23:08 NAT on stateless firewall ? Florin Andrei
2007-08-03 1:49 ` Gregory Carter
2007-08-03 3:30 ` Florin Andrei
2007-08-03 4:10 ` Grant Taylor
2007-08-03 9:55 ` Pascal Hambourg
2007-08-03 18:23 ` Florin Andrei
2007-08-03 19:11 ` Florin Andrei
2007-08-03 19:15 ` Martijn Lievaart
2007-08-03 19:56 ` Florin Andrei
2007-08-03 20:37 ` Martijn Lievaart
2007-08-03 20:51 ` Grant Taylor [this message]
2007-08-05 20:16 ` Martijn Lievaart
2007-08-06 1:04 ` Grant Taylor
2007-08-06 5:01 ` Martijn Lievaart
2007-08-06 14:11 ` Grant Taylor
2007-08-03 19:23 ` Grant Taylor
2007-08-03 19:53 ` Pascal Hambourg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=46B39567.5080004@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=gtaylor+reply@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.