In article <795laj$t68$1@gate.mps.co.uk>,
Peter T. Breuer <ptb@it.uc3m.es> wrote:
>Sam wrote
> > i believe you're missing the whole point. Alexey summed it up nicely
> > earlier. when you ifconfig an interface the main thing you do is tell
> > the kernel which set of ip addresses can be reached directly via that
> > interface. ie the route is implicit when you configure the interface.
>
>No - what happens if you are a firewall? You want to configure the interface
>without taking packets from it. You want to block the packets or pass them to
>the other interface. No route.
1) you don't want any packets from the interface -> don't ifconfig it.
2) you want to selectively filter which packets are allowed via the interface.
ifconfig it, then use ipchains.
-Sam.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/