Subject: weird routing
To: None <netbsd-help@netbsd.org>
From: Chris Jones <cjones@rupert.honors.montana.edu>
List: netbsd-help
Date: 05/25/1999 15:37:51
This certainly looks like a bug, but I wanted to make sure I wasn't
missing something obvious before I sent in a pr.

I have a machine which is acting as a gateway and firewall.
(Currently, the only ipf rules it's using are the default ones
generated by the mkfilters perl script, which are pretty minimal.)
It's configured thusly:

ne0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	address: 00:80:c8:37:b3:75
	media: Ethernet manual
	inet 208.132.31.254 netmask 0xffffff80 broadcast 208.132.31.255
	inet alias 10.1.1.1 netmask 0xffffff00 broadcast 10.1.1.255
ne1: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	address: 00:80:c8:37:b6:ec
	media: Ethernet manual
	inet 208.128.130.5 netmask 0xffffff00 broadcast 208.128.130.255
lo0: flags=8009<UP,LOOPBACK,MULTICAST> mtu 32976
	inet 127.0.0.1 netmask 0xff000000 

There's another machine on the ne0 ethernet with an IP of 10.1.1.2,
which is a gateway into a network at 208.132.31.128/28.

When a machine in that network sends a packet to www.acceltech.com, my
firewall responds.  It will respond to a ping or even a TCP packet as
if they were addressed to it.  However, it routes other traffic just
fine.  The people behind this firewall claim that there are a few
other addresses which behave the same way, too.

The firewall machine in question is NetBSD/i386 1.4.

Chris

-- 
-----------------------------------------------------cjones@math.montana.edu
Chris Jones                                          cjones@honors.montana.edu
           Mad scientist at large                    cjones@nervana.montana.edu
"Is this going to be a stand-up programming session, sir, or another bug hunt?"