Re: restrict implicit binding to interfaces

David Schwartz <davids@xxxxxxxxxxxxx> wrote:
On Oct 29, 5:54?pm, Rick Jones <rick.jon...@xxxxxx> wrote:

While "Linux" is very much not such a stack on a "Strong End-System
Model" system binding to a given IP address is pretty much the same
thing since the traffic to that IP will only be accepted on that
interface.

Umm, no!!! That would make building a router virtually impossible.

Indeed, it wouldn't take to routing changes very well, but it could
still route. However, given the term has "end system" in it, that
would (IIRC) be out of the context of something acting as an IP
router.

Traffic to any IP assigned to the machine will, and must, be accepted
regardless of what interface it arrives on.

In the weak end system model, yes. In the strong end system model
that does not apply. Some systems (eg HP-UX, perhaps Solaris) allow
the system to be put into (some variation on the theme of) the strong
end system model.

rick jones
--
oxymoron n, Hummer H2 with California Save Our Coasts and Oceans plates
these opinions are mine, all mine; HP might not want them anyway... :)
feel free to post, OR email to rick.jones2 in hp.com but NOT BOTH...
.

Relevant Pages

  • Re: restrict implicit binding to interfaces
    ... David Schwartz writes: ... Model" system binding to a given IP address is pretty much the same ... regardless of what interface it arrives on. ... Sounds like a real security risk to me. ...
    (comp.os.linux.networking)
  • Re: 2 interfaces, 2 gateways, no internet
    ... David Schwartz writes: ... of them makes perfect sense. ... one may be a backup in case ... the other interface loses link. ...
    (comp.os.linux.networking)
  • Re: restrict implicit binding to interfaces
    ... David Schwartz writes: ... Programs don't listen to networks. ... If you configure an interface to one address, ... Unless you put the interface into promiscuous mode using a network sniffer. ...
    (comp.os.linux.networking)
  • Re: restrict implicit binding to interfaces
    ... Model" system binding to a given IP address is pretty much the same ... regardless of what interface it arrives on. ...
    (comp.os.linux.networking)