Hi,
Does the Linux Network Stack do MAC address verification for
REPLY packets. For example, lets say a client "C" sends a packet
to server "S" as:
REQUEST = {MAC_c, MAC_s, IP_c, IP_s, PORT_c, PORT_s}.
The client obtains MAC_s from its routing table (which internally
does an ARP request to associate IP_s with MAC_s in the ARP cache).
Will Linux drop a reply from the server (IP_s) if the source MAC
address in the reply is different than MAC_s, for example:
REPLY = {MAC_x, MAC_c, IP_s, IP_c, PORT_s, PORT_c}
MAC_x not equal to MAC_s
thanks
|