Re: Multicast DROP?
From: NeoSadist (neosad1st_at_charter.net)
Date: 01/11/04
- Next message: Tim H.: "Re: Trojan Horse is More Damaging then a Virus"
- Previous message: Snortle: "Sygate PF I/O"
- In reply to: Isaac Grover: "Multicast DROP?"
- Next in thread: Nicholas Suan: "Re: Multicast DROP?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 11 Jan 2004 00:17:46 -0700
Isaac Grover wrote:
> Hi everyone,
>
> I see the reigning opinion in this group is that using DROP as a traffic
> management policy is bad.
No, I never said that, I just said that it's not "proper". I use DROP
instead of REJECT.
> I can understand this for two-way traffic like
> ICMP,
> but what about multicast from 224.0.0.0/8? Based on my understanding,
> multicast
> is like shouting in a room. If there's people (clients) to hear you,
> good, but if there's no people to hear you, no harm has been done to the
> shouter
> (multicast broadcaster). Am I correct in my understanding?
Basically.
>
> If so, wouldn't REJECTing a multicast packet actually do more harm than
> good by sending useless traffic over the network?
Uh, maybe. I drop multicast packets too, and I turn off the ability to
multicast, so I couldn't tell you. What are you wanting to do? Are you
wanting to disable multicasting? Disable it using the ifconfig options for
the adapter, and possibly using the /proc file area and/or a firewall. I
think shutting off multicasting on the adapter should be enough ...
>
>
> Isaac
>
> Are you losing $14,200.00 per year without your knowledge?
> http://bigmoneyandfreetime.web1000.com
-- When I works, I works hard. When I sits, I sits easy. And when I thinks, I goes to sleep.
- Next message: Tim H.: "Re: Trojan Horse is More Damaging then a Virus"
- Previous message: Snortle: "Sygate PF I/O"
- In reply to: Isaac Grover: "Multicast DROP?"
- Next in thread: Nicholas Suan: "Re: Multicast DROP?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
