Menu

#292 Legacy - multi interfaces on same network create antispoof problem

v1.0_(example)
open
nobody
None
5
2012-12-23
2012-12-23
No

If we create multiple interfaces on the same network and anti-spoof is enabled, we cut off traffic because of conflicting antispoofing rules in the mangle table PREROUTING chain, e.g., one that says if !eth1 and source 172.16.20.0/24 DROP and another that says !eth2 and source 172.16.20.0/24 DROP. We'll need to detect if multiple interfaces are operating on the same network and automatically disable anti-spoof.

Discussion


Log in to post a comment.