Score:0

Security issues with configuring default IP address(0.0.0.0) to ethernet interface

ca flag

In our linux embedded application we would like to keep available ports up and running and assigning with 0.0.0.0 IP address. In short we will be executing all ports with ifconfig ethX 0.0.0.0, and setting all IP address to virtual interfaces ethX:100 20.20.20.20 is there any security issues with configuring ethX to 0.0.0.0? Is there any other issue can be faced if we configure all IP address on virtual interfaces?

Michael Hampton avatar
cz flag
This doesn't make any sense. Why are you doing this?
ca flag
because of our limitation of our application framework we cannot identify which one is first and which one is victuals. so if user delete the first interface then we will take down the eth0 and that will take down all virtual interfaces. To avoid that we are planning to add all ip address to virtual
A.B avatar
cl flag
A.B
You must avoid on Linux, any use of `ifconfig` . That's a mistake to keep using `ifconfig` on Linux without understanding that aliases are not interfaces but addresses. Use `ip link` + `ip address` instead. These tools must probably be present, while `ifconfig` doesn't have to: you'd spare space on embedded. Removing a *primary* address removes all other *secondary* addresses in the same IP LAN by default. This is not related to alias addresses. If an alias address was in an other IP LAN, it would also be primary and not removed. primary is just the first defined in the IP LAN.
ca flag
When we remove an IP configuration from application code it will DOWN the interface. If we DOWN virtual interface then other IP addresses will be still available. We are not allowed to use iproute2 library now :( (using iproute2 is still under investigation)
A.B avatar
cl flag
A.B
iproute2's kernel API (netlink) has been around for more than 20 years. Time to be allowed to use it...
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.