[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: antispoof vs. ip aliases



On Sun, Mar 30, 2003 at 06:45:36PM +0200, Srebrenko Sehic wrote:
> On Sun, Mar 30, 2003 at 06:29:09PM +0200, Henning Brauer wrote:
> > yes, that is known. I don't see a real world problem with this; the effect
> > is zero as skip steps solve that nicely.
> Hurray for skip-steps then ;) However, imagine having tons of
> aliases; resulting filter rules might get a bit ugly.
well, I don't think that is worth quite some extra code to detect those...
> Without checking, can't this be fixed rather easily? Check on the
> netmask; if same as non-aliased mask, skip it.
didn't look, isn't that trivial I think... perhaps I check later
-- 
Henning Brauer, BS Web Services, http://bsws.de
hb@bsws.de - henning@openbsd.org
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)