Re: Re: [Ebtables-user] bridge/ebtables interaction...
Stephen Hemminger <[email protected]>
| Newsgroups | gmane.linux.network.bridge.ebtables.devel |
|---|---|
| Organization | Open Source Development Lab |
| Message-ID | <[email protected]> |
On Tue, 24 May 2005 13:41:11 -0400 Jon Anderson <janderson-PLjm5N+tXOMV+D8aMU/[email protected]> wrote: > Stephen Hemminger wrote: > > >I have no objection to hook changes as long as: > > * it addresses a real need that can't be satisfied in other ways > > > > > I guess you missed the problem I was having to begin with. A host on the > 'wrong' side of the bridge can send from a spoofed mac, and it will > cause the bridge to send data to the 'wrong' port, rather than where the > original host really is. That implies a bad bridge topology (not tree), so that can't be legal. There can be only one (active) path to another node or the possiblities of loops exist and bridging won't work! ------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005