From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org)
by nuthatch.gentoo.org with esmtp (Exim 4.50)
id 1EZA2W-0006r6-1F
for garchives@archives.gentoo.org; Mon, 07 Nov 2005 16:40:12 +0000
Received: from robin.gentoo.org (localhost [127.0.0.1])
by robin.gentoo.org (8.13.5/8.13.5) with SMTP id jA7GcV3e018790;
Mon, 7 Nov 2005 16:38:31 GMT
Received: from smtp.gentoo.org (smtp.gentoo.org [134.68.220.30])
by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id jA7GcU6l001118
for <gentoo-admin@lists.gentoo.org>; Mon, 7 Nov 2005 16:38:31 GMT
Received: from nproxy.gmail.com ([64.233.182.206])
by smtp.gentoo.org with esmtp (Exim 4.43)
id 1EZA0s-0001Mq-Ec
for gentoo-admin@lists.gentoo.org; Mon, 07 Nov 2005 16:38:30 +0000
Received: by nproxy.gmail.com with SMTP id h2so125308nfe
for <gentoo-admin@gentoo.org>; Mon, 07 Nov 2005 08:38:30 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=beta; d=gmail.com;
h=received:subject:from:reply-to:to:content-type:date:message-id:mime-version:x-mailer:content-transfer-encoding;
b=DZrlkry0OcUGzW24zcn9Vl4foF/UnTpeBJLuh4g3u8rhYMcXWBiD4fspD1DM0y89BJogrJn7QrOcv+h7nj8rpogzDDCK+ziWOlczH/G3/ZUnklvMwxhmw9hTnHEa1/YyGiv+MXr1q9ppQhXNDfw4B43NRwK2rySiLP1oDISdDus=
Received: by 10.48.144.1 with SMTP id r1mr1235465nfd;
Mon, 07 Nov 2005 08:38:30 -0800 (PST)
Received: from ?192.168.9.25? ( [213.156.44.66])
by mx.gmail.com with ESMTP id p45sm2848809nfa.2005.11.07.08.38.28;
Mon, 07 Nov 2005 08:38:29 -0800 (PST)
Subject: [gentoo-admin] As can I disable arp reply
From: geaaru <geaaru@gmail.com>
To: gentoo-admin@lists.gentoo.org
Content-Type: text/plain
Date: Mon, 07 Nov 2005 18:49:27 +0100
Message-Id: <1131385767.6594.7.camel@localhost>
Precedence: bulk
List-Post: <mailto:gentoo-admin@lists.gentoo.org>
List-Help: <mailto:gentoo-admin+help@gentoo.org>
List-Unsubscribe: <mailto:gentoo-admin+unsubscribe@gentoo.org>
List-Subscribe: <mailto:gentoo-admin+subscribe@gentoo.org>
List-Id: Gentoo Linux mail <gentoo-admin.gentoo.org>
X-BeenThere: gentoo-admin@gentoo.org
Reply-to: gentoo-admin@lists.gentoo.org
Mime-Version: 1.0
X-Mailer: Evolution 2.2.1.1
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 23b505a0-a03e-4855-b310-63a06459e152
X-Archives-Hash: 7d4e5a7ad25ffc70cb69b9f93a3a78e7
Thanks for your replies.
I have a problem with ethernet interface:
On eth0 interface I use freeradius and a pppoe server and eth0 haven't
ip addres.
eth0 Link encap:Ethernet HWaddr 00:0x:xx:xx:xx:xx
inet6 addr: xxxx::xxx:xxxx:xxxx:xxxx/64 Scope:Link
UP BROADCAST RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:4136 errors:0 dropped:0 overruns:0 frame:0
TX packets:3808 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:388327 (379.2 Kb) TX bytes:956494 (934.0 Kb)
However with ethereal I see that this interface send a arp-request like
this
Who has 0.0.0.0? Gratiutous ARP.
As can I disable these arp request.
PRE: I'm under XEN SO but eth0 is on dom-0 and MAC of request is eth0
not eth0 on dom-2. kernel 2.6.12.5-r1 and eth0 is
eth0: e1000_probe: Intel(R) PRO/1000 Network Connection
I try different solutions:
1) With ebtables:
$EBTABLES -P INPUT DROP
$EBTABLES -P OUTPUT DROP
$EBTABLES -P FORWARD DROP
for i in $OTHER_IFACE
do
echo -n "Enable $i interface..."
$EBTABLES -A INPUT -i $i -p arp -j ACCEPT
$EBTABLES -A INPUT -i $i -p ipv4 -j ACCEPT
$EBTABLES -A OUTPUT -o $i -p arp -j ACCEPT
$EBTABLES -A OUTPUT -o $i -p ipv4 -j ACCEPT
$EBTABLES -A FORWARD -o $i -p ipv4 -j ACCEPT
$EBTABLES -A FORWARD -o $i -p arp -j ACCEPT
$EBTABLES -t nat -A POSTROUTING -o $i -p arp -j ACCEPT
$EBTABLES -t nat -A POSTROUTING -o $i -p ipv4 -j ACCEPT
$EBTABLES -t nat -A OUTPUT -o $i -p arp -j ACCEPT
$EBTABLES -t nat -A OUTPUT -o $i -p ipv4 -j ACCEPT
$EBTABLES -t nat -A PREROUTING -i $i -p arp -j ACCEPT
$EBTABLES -t nat -A PREROUTING -i $i -p ipv4 -j ACCEPT
echo "done."
done;
# Rules for adsl clients interface
$EBTABLES -A INPUT -i eth0 -p ipv4 -j ACCEPT
$EBTABLES -A OUTPUT -o eth0 -p ipv4 -j ACCEPT
$EBTABLES -A FORWARD -o eth0 -p ipv4 -j ACCEPT
$EBTABLES -t nat -A PREROUTING -i eth0 -p ipv4 -j ACCEPT
$EBTABLES -t nat -A POSTROUTING -o eth0 -p ipv4 -j ACCEPT
$EBTABLES -t nat -A OUTPUT -o eth0 -p ipv4 -j ACCEPT
Also with these rules there are are request to 0.0.0.0. Also if I have
disabled all packet on eth0!!!!!!
2) ifconfig eth0 0.0.0.0 -arp
Nothings.
3) ip link set eth0 arp off
Nothings.
What can I do?
Thanks for your help.
--
gentoo-admin@gentoo.org mailing list