add further links to iptunnels

Signed-off-by: Marek Küthe <m.k@mk16.de>
This commit is contained in:
Marek Küthe 2023-01-04 20:14:33 +01:00
parent abd0a9584a
commit d97c683d0f
No known key found for this signature in database
GPG Key ID: 7E869146699108C7
1 changed files with 5 additions and 0 deletions

View File

@ -147,3 +147,8 @@ ip link add [...] encap [...] encap-sport <lport>
Here `<lport>` is the own port and `<rport>` is the port of the peer. `<local>` is its own IP address and `<remote>` is the IP address of the peer.
Specifying the source IP address can prevent an attacker with a wrong source IP address from sending an encapsulated tunnel packet (e. g. GRE or SIT) that has the correct source address in the UDP tunnel. However, this procedure does not protect against IP spoofing.
## Further links
- [An introduction to Linux virtual interfaces: Tunnels](https://developers.redhat.com/blog/2019/05/17/an-introduction-to-linux-virtual-interfaces-tunnels#)
- [Linux Advanced Routing & Traffic Control](https://lartc.org/)