kern/165190: [ipfw] [lo] loopback interface is not marking ipv6 packets

Sergey Matveychuk sem at FreeBSD.org
Sun Feb 19 23:50:10 UTC 2012


The following reply was made to PR kern/165190; it has been noted by GNATS.

From: Sergey Matveychuk <sem at FreeBSD.org>
To: bug-followup at FreeBSD.org, public at macfreek.nl
Cc:  
Subject: Re: kern/165190: [ipfw] [lo] loopback interface is not marking ipv6
 packets
Date: Mon, 20 Feb 2012 03:18:13 +0400

 This is a multi-part message in MIME format.
 --------------080202040908010900010503
 Content-Type: text/plain; charset=UTF-8; format=flowed
 Content-Transfer-Encoding: 7bit
 
 Julian wrongs here.
 
 Try the patch please.
 I've found the superfluous code in nd6.c when wrote a patch for 
 divert(4) and was very annoyed this loopback behaviour.
 For unknown reasons KAME authors decided to fake interface for loopback. 
 It differs from IPv4 code, so, I guess, it should be fixed. But I could 
 not proof it. Your example is better for this.
 
 --------------080202040908010900010503
 Content-Type: text/x-patch;
  name="nd6.c.diff"
 Content-Transfer-Encoding: 7bit
 Content-Disposition: attachment;
  filename="nd6.c.diff"
 
 --- sys/netinet6/nd6.c.orig	2011-02-25 17:48:54.000000000 +0300
 +++ sys/netinet6/nd6.c	2011-02-25 17:49:51.000000000 +0300
 @@ -1928,10 +1928,6 @@
  		}
  		return (error);
  	}
 -	if ((ifp->if_flags & IFF_LOOPBACK) != 0) {
 -		return ((*ifp->if_output)(origifp, m, (struct sockaddr *)dst,
 -		    NULL));
 -	}
  	error = (*ifp->if_output)(ifp, m, (struct sockaddr *)dst, NULL);
  	return (error);
  
 
 --------------080202040908010900010503--


More information about the freebsd-ipfw mailing list