看板FB_security
标 题Re: [patch] Raw sockets in jails
发信站NCTU CSIE FreeBSD Server (Tue Apr 20 20:08:23 2004)
转信站ptt!FreeBSD.csie.NCTU!not-for-mail
In message <
[email protected]>, "Christian S.J. Peron" w
rites:
>Poul/group
>
>The following patch makes raw sockets comply with prison IP addresses.
>Some tools such as traceroute(8) may require that the prison IP address
>be specified on the command line. I.E.
>
> traceroute -s <prison ip> <dest address>
>
>Otherwise it might fail.
How does traceroute and ping normally determine which source address
to use ? Can't we use that mechanism to default them to the right thing ?
--
Poul-Henning Kamp | UNIX since Zilog Zeus 3.20
[email protected] | TCP/IP since RFC 956
FreeBSD committer | BSD since 4.3-tahoe
Never attribute to malice what can adequately be explained by incompetence.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"