Re: Loopback security...

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Petr Pisar a écrit :
> 
> No. Loopback interface is just another dummy interface to be able to
> assign node scope adresses from 127.0.0.0/8 block. The reason for
> loopback is somobedy wants to have (node scoped) IP socket on machine with
> no real interfaces. It's just a historical relict because IP address
> needs an interface in Linux.

I disagree. The loopback interface is very different from a dummy 
interface. A dummy interface is just a black hole, it cannot do what the 
loopback interface does. The loopback interface loops the traffic back 
to the host and the kernel knows about it, this is what makes it unique.

> E.g. I know about people running IPv6 networks where each router has
> globally routable addresses on loopaback interface, real ethernet
> interfaces between routers have only link scope addresses and a
> dynamic routing protocol (e.g, OSPF) is used to solve routing via
> network. And of course it works.

So what ? You can do the same with IPv4 and it will work too, at least 
on Linux.