kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs?
Antonio Tapiador del Dujo
atapiador at dit.upm.es
Tue Jan 25 07:00:41 PST 2005
The following reply was made to PR kern/75121; it has been noted by GNATS.
From: Antonio Tapiador del Dujo <atapiador at dit.upm.es>
To: Hajimu UMEMOTO <ume at freebsd.org>
Cc: FreeBSD-gnats-submit at freebsd.org,
Antonio Tapiador del Dujo <atapiador at dit.upm.es>,
Gleb Smirnoff <glebius at freebsd.org>
Subject: Re: kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs?
Date: Tue, 25 Jan 2005 15:57:48 +0100
--xgyAXRrhYN0wYx8y
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
El jueves, 20 de enero de 2005, a las 19:57:12, Hajimu UMEMOTO escribi=F3:
> Hi,
>=20
> A> > The IFF_LINK2 means that incoming tunnel packets may come from inte=
rface
> A> > different to interface we use for sending out tunnel packets.
> A>=20
> A> gif(4) man page talks about ingress filtering:
> A> "Ingress filtering can be turned off by IFF_LINK2 bit."
> A> that has to do with source addresses (RFC 2893, section 4.3)
> A> Then maybe this is a gif(4) man page bug.=20
> =20
> glebius> Yes, it is I think. Section 4.3 speaks about other kind of filt=
ering.
>=20
> No, manpage of gif(4) is correct. Ingress filtering is for preventing
> IP address spoofing of outer src address and dest address.
But now IFF_LINK2 does not turn off ingress filter.
Either kernel code or man page should be modified because one is=20
inconsistent with the other.
--=20
EuropeSwPatentFree - http://EuropeSwPatentFree.hispalinux.es
--xgyAXRrhYN0wYx8y
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFB9l5sAeZK4jlfl3cRAkiXAKCNOJJJ14hg5t38tx2peZDwNSPZxgCfY/nH
EF+CLPc6lE3q577AsTnLjjM=
=JyoO
-----END PGP SIGNATURE-----
--xgyAXRrhYN0wYx8y--
More information about the freebsd-bugs
mailing list