From: geaaru <geaaru@gmail.com>
To: gentoo-admin@lists.gentoo.org
Subject: [gentoo-admin] As can I disable arp reply
Date: Mon, 07 Nov 2005 18:49:27 +0100 [thread overview]
Message-ID: <1131385767.6594.7.camel@localhost> (raw)
Thanks for your replies.
I have a problem with ethernet interface:
On eth0 interface I use freeradius and a pppoe server and eth0 haven't
ip addres.
eth0 Link encap:Ethernet HWaddr 00:0x:xx:xx:xx:xx
inet6 addr: xxxx::xxx:xxxx:xxxx:xxxx/64 Scope:Link
UP BROADCAST RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:4136 errors:0 dropped:0 overruns:0 frame:0
TX packets:3808 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:388327 (379.2 Kb) TX bytes:956494 (934.0 Kb)
However with ethereal I see that this interface send a arp-request like
this
Who has 0.0.0.0? Gratiutous ARP.
As can I disable these arp request.
PRE: I'm under XEN SO but eth0 is on dom-0 and MAC of request is eth0
not eth0 on dom-2. kernel 2.6.12.5-r1 and eth0 is
eth0: e1000_probe: Intel(R) PRO/1000 Network Connection
I try different solutions:
1) With ebtables:
$EBTABLES -P INPUT DROP
$EBTABLES -P OUTPUT DROP
$EBTABLES -P FORWARD DROP
for i in $OTHER_IFACE
do
echo -n "Enable $i interface..."
$EBTABLES -A INPUT -i $i -p arp -j ACCEPT
$EBTABLES -A INPUT -i $i -p ipv4 -j ACCEPT
$EBTABLES -A OUTPUT -o $i -p arp -j ACCEPT
$EBTABLES -A OUTPUT -o $i -p ipv4 -j ACCEPT
$EBTABLES -A FORWARD -o $i -p ipv4 -j ACCEPT
$EBTABLES -A FORWARD -o $i -p arp -j ACCEPT
$EBTABLES -t nat -A POSTROUTING -o $i -p arp -j ACCEPT
$EBTABLES -t nat -A POSTROUTING -o $i -p ipv4 -j ACCEPT
$EBTABLES -t nat -A OUTPUT -o $i -p arp -j ACCEPT
$EBTABLES -t nat -A OUTPUT -o $i -p ipv4 -j ACCEPT
$EBTABLES -t nat -A PREROUTING -i $i -p arp -j ACCEPT
$EBTABLES -t nat -A PREROUTING -i $i -p ipv4 -j ACCEPT
echo "done."
done;
# Rules for adsl clients interface
$EBTABLES -A INPUT -i eth0 -p ipv4 -j ACCEPT
$EBTABLES -A OUTPUT -o eth0 -p ipv4 -j ACCEPT
$EBTABLES -A FORWARD -o eth0 -p ipv4 -j ACCEPT
$EBTABLES -t nat -A PREROUTING -i eth0 -p ipv4 -j ACCEPT
$EBTABLES -t nat -A POSTROUTING -o eth0 -p ipv4 -j ACCEPT
$EBTABLES -t nat -A OUTPUT -o eth0 -p ipv4 -j ACCEPT
Also with these rules there are are request to 0.0.0.0. Also if I have
disabled all packet on eth0!!!!!!
2) ifconfig eth0 0.0.0.0 -arp
Nothings.
3) ip link set eth0 arp off
Nothings.
What can I do?
Thanks for your help.
--
gentoo-admin@gentoo.org mailing list
next reply other threads:[~2005-11-07 16:40 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-11-07 17:49 geaaru [this message]
2005-11-07 18:25 ` [gentoo-admin] As can I disable arp reply Adolfo Castro Menna
2005-11-08 10:23 ` geaaru
2005-11-08 9:25 ` [gentoo-desktop] [gentoo-admin] Problem with configuring network via '/sbin/ifconfig' Vitaly Kovalyshyn
2005-11-08 9:25 ` Vitaly Kovalyshyn
2005-11-08 10:44 ` geaaru
2006-02-13 9:14 ` [gentoo-admin] [gentoo-desktop] Problem with Gentoo-2006.0 on AMD64 Athlon 3000+ Vitaly Kovalyshyn
2006-02-14 10:03 ` Vitaly Kovalyshyn
2006-02-14 13:18 ` Nerdvana - Steve Walsh
2005-11-08 12:34 ` Re: [gentoo-admin] As can I disable arp reply geaaru
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1131385767.6594.7.camel@localhost \
--to=geaaru@gmail.com \
--cc=gentoo-admin@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox