Re: controlling ARP Proxy scope?

On Fri, 1 Jul 2005, Zdenek Radouch wrote:

So, left with only a binary flag in /proc,  and network definition on the
interface,
I assumed (perhaps naively) that the arp would proxy only for the addresses
within the subnet defined for the interface (on which the proxy arp is
turned on).
However, that does not seem to be the case.

You may be able to tune this with either arp_filter or arp_ignore.

I have an interface with address 10.1.2.219 and mask 255.255.255.248 with
proxy arp turned on on this interface, and the machine is responding
(I see that with tcpdump) to arp requests for address 10.1.2.1, i.e.,
an address outside of the proxy interface's subnet.

Correct.

Can anyone explain the behavior?

proxy_arp simply ARPs if there is a route for the requested destination 
going out on another interface than where the ARP was seen.

Regards
Henrik