Denied broadcast packets in same interface with antispoofing

Lefteris Tsintjelis lefty at ene.asda.gr
Thu Mar 24 04:20:21 PST 2005


FreeBSD 5.4-PRERELEASE #0: Thu Mar 17 16:41:58 EET 2005

${fwcmd} add 400 deny log ip from any to any not antispoof in

rl2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 192.168.0.97 netmask 0xffffffe0 broadcast 192.168.0.127

/var/log/security:
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.96 in via rl2
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.96 in via rl2
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.127 in via rl2
ipfw: 400 Deny ICMP:8.0 192.168.0.97 192.168.0.127 in via rl2
ipfw: 400 Deny UDP 192.168.0.97:123 192.168.0.127:123 in via rl2

Why are broadcast packets originating from the same interface are denied
access? Am I missing something here?

Thanks in advance,
Lefteris Tsintjelis


More information about the freebsd-stable mailing list