Re: Bridge+firewall - possible?

Jamie Lokier (lkd@tantalophile.demon.co.uk)
Thu, 10 Dec 1998 12:37:01 +0000

On Wed, Dec 09, 1998 at 03:04:55PM +0000, Alan Cox wrote:
> 1. You set up a big proxy arp table and actually route it. Thats the
> sledgehammer approach but should work fine providing peopel dont
> move PCs around (bonus points for writing a listening daemon
> that learns where people are and adjusts the proxy arp table)

The proxy ARP code in ipv4/arp.c actually does a route lookup to decide
what to do. Doesn't this mean you can set up a proxy ARP with netmask
0.0.0.0 and that will give the effect you describe? (Assuming the
routing table is up to date).

Or is there some subtlety I have missed?

-- Jamie

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/