Subject: Re: Kill socket for certain routes
To: Steven M. Bellovin <smb@cs.columbia.edu>
From: Greg Troxel <gdt@ir.bbn.com>
List: tech-net
Date: 12/09/2006 08:29:27
--=-=-=
Content-Transfer-Encoding: quoted-printable
"Steven M. Bellovin" <smb@cs.columbia.edu> writes:
> I have a similar need. In particular, I have an EVDO wireless card
> which is less happy -- i.e., it often drops the call -- if it sees an
> outbound packet with an invalid source address.=20=20
>
> What I'd really like is an ifconfig or sysctl option preventing a
> packet from leaving an interface if the source address doesn't match.
> Since that doesn't exist, my ppp-up and ppp-down scripts manipulate my
> pf or ipf filters to do the same thing.
But what you want really is mostly a firewall feature. I can see an
ifconfig flag to say 'only pass packets matching my src addr', though.
That would make things easier.
--=-=-=
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (NetBSD)
iD8DBQFFerpF+vesoDJhHiURAoxLAJ9DukvHm3WTc2pDt3Am7ZDz+pkgAwCgrPh8
UjxYfZfa4GD1uXdfH+BNW3Q=
=p8vG
-----END PGP SIGNATURE-----
--=-=-=--