Re: Solaris 7 installation is sending 127.0.0.0/8 addresses on the ethernet network...

On Tuesday, 2002-11-26 at 15:41:28 +0800, Michael Boman wrote:

> I have a Solaris 7 (sparc) installation, with the recomended patch-batch

You are answering your own question below.

> Routing Table:

There is no route for 127.0.0.0/8, only for 127.0.0.1/32. So the default route is used.

> Here is a text dump from Ethereal that displays the offensive packets:

> Frame 1 (60 on wire, 60 captured)
> ...
> Internet Protocol, Src Addr: 127.0.0.75 (127.0.0.75), Dst Addr: 108.122.0.0 (108.122.0.0)

                      ^^

>     Destination: 108.122.0.0 (108.122.0.0)

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

> Please advice.

If you want 127.0.0.0/8 on lo0, route them there. This has been doscussed a while ago on one of the other mailing lists I read, maybe BUGTRAQ. Linux has no route for 127.<anything> and does this automagically. Solaris follows it's routing table.

HTH,
Lupe Christoph

-- 
| 
lupe(at)lupe-christoph.de       |           
http://www.lupe-christoph.de/ |
| Big Misunderstandings #6398: The Titanic was not supposed to be        |
| unsinkable. The designer had a speech impediment. He said: "I have     |
| thith great unthinkable conthept ..."                                  |