Re: Hoe maak ik 192.168.0.1 zonder netwerkkaart ??

Article View: nl.comp.os.linux.netwerken

Article #101

Back to nl.comp.os.linux.netwerken Previous Next

#101

From: Arjan Drieman
Date: Wed, 23 Feb 2000 00:00

30 lines
1775 bytes

On Tue, 22 Feb 2000 22:54:36 GMT, mike <a@b.c> wrote:
>>>En ook geen lo, localhost of 127.0.0.1 in het script ??
>>
>>Ja, evt. tegen ip spoofing.
>
>2.2 kernels droppen toch automatisch de pakketten die van buitenaf
>komen maar toch source 127.0.0.0/8 hebben?

Alleen als je source address verification gebruikt.  Je kan bijvoorbeeld
dit doen:

if [ -e /proc/sys/net/ipv4/conf/all/rp_filter ]; then
  echo -n "Setting up IP spoofing protection with rp_filter..."
  for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
    echo 1 > $f
  done
  echo "done."
else
  echo -n "Setting up IP spoofing protection with ipchains..."
  ipchains -A input -i ! lo -s 127.0.0.0/8 -j DENY
  echo "done."
fi

Zie ook /usr/src/linux/Documentation/ip-sysctl.txt


Arjan
-- 
Talk is cheap because supply 
always exceeds demand.

Technical Details

Message-ID: <slrn8b6h90.qbj.qhpxvr@node0911.a2000.nl>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References:

<38B24B7A.3DB1C3A@casema.net> <slrn8b4jeo.l6m.qhpxvr@node0911.a2000.nl> <38B25614.58545E9A@casema.net> <slrn8b59h4.mbj.qhpxvr@node0911.a2000.nl> <38b31351.23260926@news.wxs.nl>

Show Full Headers

Complete Article Headers

X-Google-Language: DUTCH,ASCII-7-bit
X-Google-Thread: 102510,6fed36878d04a98c
X-Google-Attributes: gid102510,public
X-Google-Thread: 1049e4,6fed36878d04a98c
X-Google-Attributes: gid1049e4,public
From: qhpxvr@abqr0911.n2000.ay.invalid (Arjan Drieman)
Subject: Re: Hoe maak ik 192.168.0.1 zonder netwerkkaart ??
Date: 2000/02/23
Message-ID: <slrn8b6h90.qbj.qhpxvr@node0911.a2000.nl>
X-Deja-AN: 588657468
References: <38B24B7A.3DB1C3A@casema.net> <slrn8b4jeo.l6m.qhpxvr@node0911.a2000.nl> <38B25614.58545E9A@casema.net> <slrn8b59h4.mbj.qhpxvr@node0911.a2000.nl> <38b31351.23260926@news.wxs.nl>
X-Complaints-To: abuse@a2000.nl
X-Trace: weber.a2000.nl 951272732 29141 62.108.9.17 (23 Feb 2000 02:25:32 GMT)
Organization: A2000 Kabeltelevisie en Telecommunicatie
User-Agent: slrn/0.9.6.2 (Linux)
Reply-To: duckie@duckie.neep.net
NNTP-Posting-Date: 23 Feb 2000 02:25:32 GMT
Newsgroups: nl.comp.os.linux.netwerken,casema.linux

Reply to Parent Message