Re: Why no printk for duplicate IPs?
Alex Nicolaou (anicolao@mud.cgl.uwaterloo.ca)
Wed, 29 Sep 1999 14:13:42 -0400
Alan Cox wrote:
>
> > On the other hand, someone should still take the time to modify
> > "ifconfig" to send out one or two ARPs for our OWN IP address, and if
> > they get answered, it should not allow the ifconfig to complete
> > (without the operator specifing something like --force).
>
> That becomes a denial of service attack like the Macmasher which simply
> sits on a network claiming each appletalk address is used. 100% mac
> free networks
How does the current setup avoid this problem? If someone's answering
ARPs for your IP, you're not going to get far.
This is a long-standing problem with almost all of the TCP protocols -
they assume trusted network administrators. Of course these days anyone
with a cable modem and a PC is a "network administrator" :-(
alex
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/