From: Stephen Hemminger <shemminger@osdl.org>
To: Dirk Morris <dmorris@metaloft.com>
Cc: bridge@lists.osdl.org
Subject: Re: [Bridge] mac table updates
Date: Thu, 28 Jul 2005 21:33:02 -0700 [thread overview]
Message-ID: <20050728213302.18c9fd06@localhost.localdomain> (raw)
In-Reply-To: <42E968FF.6000607@metaloft.com>
On Thu, 28 Jul 2005 16:23:43 -0700
Dirk Morris <dmorris@metaloft.com> wrote:
> I think the new mac ageing (sometime since 2.6.8.1) may be too
> aggressive. Now it updates the table at a much later time, with a
> comment in the code that leads me to believe
> this is to prevent counting spoofed packets and a DOS.
>
> My problem is that the update occurs after the netfilter hooks which
> may do weird things to change the course of the packet so that it
> does not get counted.
> (in my case, redirecting, queueing to userspace, nonlocally bound
> sockets, etc).
> For me this causes packets to go spewing out on the wrong interface
> when the timer expires.
>
> I used the attached patch to revert back to the old method.
>
> -Dirk
If you are whacking the source address, that seems wrong. The fix for
that would be to copy the original source address somewhere, then
extract it back afterwards.
next prev parent reply other threads:[~2005-07-29 4:33 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-07-28 23:23 [Bridge] mac table updates Dirk Morris
2005-07-29 4:33 ` Stephen Hemminger [this message]
2005-07-29 16:43 ` Dirk Morris
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20050728213302.18c9fd06@localhost.localdomain \
--to=shemminger@osdl.org \
--cc=bridge@lists.osdl.org \
--cc=dmorris@metaloft.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox