Re: IPFW2 versrcreach update

From: Gleb Smirnoff (glebius_at_freebsd.org)
Date: 07/20/04

  • Next message: Mike Jakubik: "NATD no longer works for outgoing PPTP VPN?" 
    Date: Tue, 20 Jul 2004 13:03:32 +0400
To: Andre Oppermann <andre@freebsd.org>

    On Tue, Jul 20, 2004 at 10:04:43AM +0200, Andre Oppermann wrote:
    A> > Anyway the idea is to fail the check if the route has RTF_REJECT or
    A> > RTF_BLACKHOLE flag, under loose-check (ifp set to NULL) operation, which is
    A> > an easy straight forward change.
    A>
    A> How do you set the RTF_REJECT or RTF_BLACKHOLE flags on a route with Zebra/
    A> Quagga and friends?

    When you have "ip route x.x.x.x/y Null0" in configuration this actually
    means adding route to lo0 with RTF_BLACKHOLE flag. 

    -- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Mike Jakubik: "NATD no longer works for outgoing PPTP VPN?"

    Relevant Pages

    • Re: saving routing table question
      ... It was obviously made so somebody didn't have to waste time writing route ... It may stay for years or it may be replaced in Solaris 11. ... Sometimes you need a static route, and that -p flag in newer solaris 10s ... Anything beats scripts to add routes, which is primitive and a time ...
      (comp.sys.sun.admin)
    • RE: Removing unnecessary data
      ... Route No ... I tried to attach a flag depending on the distance to the bus from the ... Point Blies between 5775-5830 ...
      (perl.beginners)
    • Re: IPFW2 versrcreach update
      ... J> + /* by this point a route is found. ... Seems reasonable from my viewpoint. ... P.S. GNU zebra null-routes into lo0, always setting RTF_BLACKHOLE flag. ...
      (freebsd-net)
    • Re: dhclient sucks
      ... > That just means you have to hardcode your resolver and default route into ... > the DHCP server tells you to" flag in the config file I believe. ...
      (freebsd-current)