[wplug] one armed router

lt ltost at pobox.com
Tue Dec 12 08:21:39 EST 2000


Bill Powell wrote:
> 
> The first disclaimer:   I am no networking expert. But I just happened to
> read something the day before getting this note.
> 
> Setting a single network card up to handle two IP address' in this fashion
> forces it into a 'promiscuous' mode that can make it vunerable to a number of
> security issues.  So you might want to do some research on this before
> betting the farm.
> 

I'm not so sure about this...

[root at hiro /root]# ifconfig -a
eth0      Link encap:Ethernet  HWaddr 00:00:86:3A:DE:95  
          inet addr:192.168.1.30  Bcast:192.168.1.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          RX packets:3491 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2233 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:11 Base address:0x200 

eth0:1    Link encap:Ethernet  HWaddr 00:00:86:3A:DE:95  
          inet addr:192.168.200.200  Bcast:192.168.200.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING  MTU:1500  Metric:1
          Interrupt:11 Base address:0x200 

[root at hiro /root]# ifconfig eth0 promisc
[root at hiro /root]# ifconfig -a
eth0      Link encap:Ethernet  HWaddr 00:00:86:3A:DE:95  
          inet addr:192.168.1.30  Bcast:192.168.1.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING PROMISC  MTU:1500  Metric:1
          RX packets:3704 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2256 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:11 Base address:0x200 

eth0:1    Link encap:Ethernet  HWaddr 00:00:86:3A:DE:95  
          inet addr:192.168.200.200  Bcast:192.168.200.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING PROMISC  MTU:1500  Metric:1
          Interrupt:11 Base address:0x200 

-- 
Lance Tost, ltost at pobox.com

Tip of the moment:
Real Programs don't use shared text.  Otherwise, how can they use
functions
for scratch space after they are finished calling them?



More information about the wplug mailing list