Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Aug 1996 11:10:53 -0500 (CDT)
From:      Joe Greco <jgreco@brasil.moneng.mei.com>
To:        nate@mt.sri.com (Nate Williams)
Cc:        mnewell@kaizen.net, jgreco@brasil.moneng.mei.com, hackers@freefall.freebsd.org
Subject:   Re: Routed supports variable-length netmasks?
Message-ID:  <199608161610.LAA15418@brasil.moneng.mei.com>
In-Reply-To: <199608161532.JAA06486@rocky.mt.sri.com> from "Nate Williams" at Aug 16, 96 09:32:15 am

next in thread | previous in thread | raw e-mail | index | archive | help
> > > I use static routing around here with no problems.
> > 
> > I found static routes to be a problem.  If the ppp link goes down and a
> > packet arrives it redirects the route out throught he default; when the
> > link comes back up it doesn't get re-re-directed.   :-(
> > 
> > What we were trying to do is use the /etc/ppp/ip-up and /etc/ppp/ip-down
> > to install static routes, but route won't work for non-root logins.  :-(
> > I remember something about this on the list, but I've not had a chance to
> > research it.  :-(!!
> 
> /etc/ppp/ip-up and /etc/ppp/ip-down are run as root, no matter who the
> login user is.  This also means you must be careful what you put in
> there, but since the environment is safeguarded pretty well it would be
> hard to break into a system via them.

I found under FreeBSD, um, I think 2.0.5R that this didn't work real well
because route did additional checks for root permissions (I believe I got
around it by forcing the uid and euid to 0, or something like that).

It was a tad ugly.  I don't do this anymore anyways - I use SLIP for any
situations requiring routing.

... JG



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199608161610.LAA15418>