Received: from SOUTH-STATION-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA14465; Sat, 24 Feb 96 19:20:24 EST Received: from pain.lcs.mit.edu by MIT.EDU with SMTP id AA21172; Sat, 24 Feb 96 19:19:51 EST Received: (from daemon@localhost) by pain.lcs.mit.edu (8.6.12/8.6.12) id RAA09879; Sat, 24 Feb 1996 17:23:27 -0500 Received: from jekyll.piermont.com by pain.lcs.mit.edu (8.6.12/8.6.12) with ESMTP id RAA09245; Sat, 24 Feb 1996 17:09:09 -0500 Received: from localhost (perry@localhost) by jekyll.piermont.com (8.7.3/8.6.12) with SMTP id OAA05805; Sat, 24 Feb 1996 14:10:45 -0500 (EST) Message-Id: <199602241910.OAA05805@jekyll.piermont.com> X-Authentication-Warning: jekyll.piermont.com: Host perry@localhost didn't use HELO protocol To: Peter Simons Cc: Chris_G_Demetriou@NIAGARA.NECTAR.CS.CMU.EDU, gnats-bugs@NetBSD.ORG, netbsd-bugs@NetBSD.ORG Subject: Re: kern/2121: Default setting of ip.forwarding is not good In-Reply-To: Your message of "Sat, 24 Feb 1996 09:59:54 +0100." <199602240859.JAA04762@peti.rhein.de> Reply-To: perry@piermont.com X-Reposting-Policy: redistribute only with permission Date: Sat, 24 Feb 1996 14:10:41 -0500 From: "Perry E. Metzger" Sender: owner-netbsd-bugs@NetBSD.ORG Precedence: list X-Loop: netbsd-bugs@NetBSD.ORG Peter Simons writes: > Chris_G_Demetriou@NIAGARA.NECTAR.CS.CMU.EDU wrote: > > > This behaviour is required by an RFC > > Then please document it somewhere. Somewhere _very_ visible! :) I don't really understand why this needs to be strongly documented -- it is standard behavior on all systems. The hosts requirements RFC absolutely requires this behavior, and furthermore, this is the behavior you would expect from a kernel that had not been compiled with option GATEWAY (which should probably now be named option ROUTER) on. Indeed, I actually think its a significant bug that there is no way to compile the kernel with support for forwarding of source routed packets off, which is a significant security hole, too... Perry