search

arno-iptables-firewall / aif

GNU General Public License v2.0
151 stars 24 forks source link

support for AnyIP? #82

Open nimbius opened 3 years ago

nimbius commented 3 years ago

The AnyIP feature of the Linux kernel allows you to bind a complete IPv4 or IPv6 subnet to your system.

Instead of adding all addresses manually to the kernel you can tell it to bind a complete subnet.

examples:

ip -4 route add local 192.168.0.0/24 dev lo ip -6 route add local 2001:db8:100::/64 dev lo

after adding similar commands, I cannot in fact reach individual ips in the subnets.

abelbeck commented 3 years ago

@nimbius : I'm not sure what problem this sort of local route solves. I found an old'ish related blog post:

AnyIP: Bind a whole subnet to your Linux machine https://blog.widodh.nl/2016/04/anyip-bind-a-whole-subnet-to-your-linux-machine/

It would seem any added local routes would not be reachable outside of lo.