Re: bridging with iptables (was no subject)

[Jack Bowling <jbinpg@shaw.ca>]

Nothing to add. Just changed the subject line to something useful for the archives and search engines.

jb


** Reply to message from Antony Stone <Antony@Soft-Solutions.co.uk> on Fri, 28 Jun 2002 21:00:46 +0100


> On Friday 28 June 2002 9:02 pm, Patrick Schaaf wrote:
> 
> > Hi Antony,
> >
> > > Hmmm.   I thought a bridge was supposed to have the same address on both
> > > interfaces.   Still, I've never set one up myself, so maybe there's more
> > > than one way to do it.
> >
> > A bridge, by its nature, has no IP addresses at all. The original poster
> > is asking about a pure router.
> 
> Ugh.   In that case I recommend using IPs from two *different* network ranges 
> on the two sides of the machine !
> 
> > And you are right on spot with your observation about the ability of a
> > malicious user to fake her MAC address at will. And one nice thing about
> > most wireless networks is that I can just listen to the air for some time
> > to learn what MAC/IP combination it is that I should fake after it became
> > silent...
> 
> Indeed.   There may be anti-sniffing measures available for wired networks, 
> but I know of nothing which can detect / defeat sniffing on wireless.
> 
>  
> 
> Antony.