Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Jan 2000 14:35:54 +0100
From:      Roelof Osinga <roelof@nisser.com>
To:        "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
Cc:        Kuzak <kuzak@kuzak.net>, freebsd-stable@FreeBSD.ORG
Subject:   Re: Odd DoS
Message-ID:  <38919B3A.FFA1E70D@nisser.com>
References:  <200001280822.AAA80458@gndrsh.dnsmgr.net>

next in thread | previous in thread | raw e-mail | index | archive | help
"Rodney W. Grimes" wrote:
> 
> Fix your netmask on your alias and these will go away.  If your
> using an IP address as an alias it should have a netmask of 0xffffffff.

No they don't. Details are in the archives, b.t.w. Nonetheless I
take it you mean something like:

ifconfig_ep1="inet 212.187.0.39 netmask 255.255.248.0"
#used to be
#ifconfig_ep1_alias0="inet 194.134.130.170 194.134.128.1 netmask
255.255.252.0"
#according to some:
ifconfig_ep1_alias0="inet 194.134.130.170 netmask 255.255.255.255"
#ifconfig_le0="inet 194.134.130.170 netmask 255.255.252.0"
#defaultrouter="10.0.0.10"
#defaultrouter="194.134.128.1"
defaultrouter="212.187.0.1"
#static_routes="euronet"
#route_euronet="194.134.0.0 194.134.128.1"

The only difference is that a -1 netmask results in less ARP
failures.

Anyway, I think it has been written to facilitate aliassed addresses
within the same subnet. I.e. all having the same gateway. The above
is an unforeseen case and that it works at all is a compliment to
the coder(s).

Mine is probably a special case, and temporary to boot. I can live
with the:

 ...
arplookup 194.134.128.1 failed: host is not on local network
arplookup 194.134.128.1 failed: host is not on local network
file: table is full
file: table is full
 ...

until the time I can do without the alias. Apparantly, so can
FreeBSD. It has been 41 days since the last CVSup <g>.

Having tested most, if not all, permutations possible in the config
above by commenting and uncommenting appropriate sections; not to
mention the manual fiddling with routes, ifconfigs and ARP tables
I do feel justified in pointing out that it might very well be
caused by having an alias on a different subnet.

Roelof

-- 
Dog's house at http://cairni.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38919B3A.FFA1E70D>