Re: Router filtering not enough! (Was: Re: CERT advisory )

[Jon Peatfield <J . S . Peatfield @ damtp . cambridge . ac . uk>]

> This breaks people who might have their netmasks set incorrectly on the local
> net.

I was assuming you would configure it to know what local addresses are rather 
then expecting it to work them out.  So many sites use sub-netting and run 
several sub-nets on one ethernet (we do), that determining the "local" 
addresses is non trivial.  A list of networks/netmasks together with a list of 
router MAC addresses should be sufficient.

-- Jon