D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Martian source

 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Grant Sewell wrote:
> 
> They are on the same subnet - he is not using a standard class A/B/C subnet mask.

Herein lies the problem, I think(?!), the original assumption in IP was
that a machine will not have multiple interfaces in the same network.

My guess here is that the routing for the network broadcast is on the
other interface (check netstat -rn) and so the broadcast doesn't belong
on this interface (is literally "alien" in the sense of foreign).

If you are sure no spoofed traffic can reach that interface you can
probably just disable martian logging for that interface.

However I've seen similar configs without these errors - so perhaps the
OP fiddled with something else (spoof protection?).

However you may find that the machine isn't doing what you expect in
terms of having two interfaces on the same network. Usually all outgoing
traffic will go through a preferred interface.

The LARTC howto touches on these kinds of configurations in Chapter 10.
Worth a read.
-----BEGIN PGP SIGNATURE-----
Comment: Encryption...is a powerful defensive weapon for free people.
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCzw9LGFXfHI9FVgYRAhrtAJ9pbEiny5+iTDX4rADx3y0Gc5IosQCeJyhi
oeNh0MGOFqFUbjK0zx1ph4c=
=5Y5z
-----END PGP SIGNATURE-----

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html