Re: [IPV4] LVS: Allow to send ICMP unreachable responses when real-servers are removed
From: Simon Horman <horms@verge.net.au>
Date: 2007-05-18 01:06:58
From: Simon Horman <horms@verge.net.au>
Date: 2007-05-18 01:06:58
On Thu, May 17, 2007 at 06:40:28PM +0200, Patrick McHardy wrote:
Actually thats exactly the case that my patch handles. Why does it matter which source address the ICMP packet uses, as long as its routed properly?
Agreed.
In any case some better solution than the current one needs to be found, allowing users to send spoofed packets is far worse than using a non-desired source address for ICMP packets.
No agrument there. -- Horms H: http://www.vergenet.net/~horms/ W: http://www.valinux.co.jp/en/