On Mon, Oct 7, 2013 at 3:47 PM, Richard W.M. Jones <rjones(a)redhat.com> wrote:
Another way to look at it might be: Since a lot of people have
libvirt
installed (it's the default isn't it?) and hence forwarding has been
on for many people for a long time, what harm is it causing?
RFC 1812
2.2.8.1 Embedded Routers
<snip> The embedded router feature seems to make building a network easy, but it has
a number of hidden pitfalls:
(1) If a host has only a single constituent-network interface, it should not act as a
router.
For example, hosts with embedded router code that gratuitously forward broadcast packets
or datagrams on the same net often cause packet avalanches.
I'm almost certain that some other RFC requires forwarding for
~workstations to be opt-in, but I couldn't find it.
Mirek