kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs?

[Antonio Tapiador del Dujo]

The following reply was made to PR kern/75121; it has been noted by GNATS.

From: Antonio Tapiador del Dujo <atapiador at dit.upm.es>
To: Hajimu UMEMOTO <ume at freebsd.org>
Cc: FreeBSD-gnats-submit at freebsd.org,
	Antonio Tapiador del Dujo <atapiador at dit.upm.es>,
	Gleb Smirnoff <glebius at freebsd.org>
Subject: Re: kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs?
Date: Tue, 25 Jan 2005 15:57:48 +0100

 --xgyAXRrhYN0wYx8y
 Content-Type: text/plain; charset=iso-8859-1
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 El jueves, 20 de enero de 2005, a las 19:57:12, Hajimu UMEMOTO escribi=F3:
 > Hi,
 >=20
 >  A> > The IFF_LINK2 means that incoming tunnel packets may come from inte=
 rface
 >  A> > different to interface we use for sending out tunnel packets.
 >  A>=20
 >  A> gif(4) man page talks about ingress filtering:
 >  A> "Ingress filtering can be turned off by IFF_LINK2 bit."
 >  A> that has to do with source addresses (RFC 2893, section 4.3)
 >  A> Then maybe this is a gif(4) man page bug.=20
 > =20
 > glebius>  Yes, it is I think. Section 4.3 speaks about other kind of filt=
 ering.
 >=20
 > No, manpage of gif(4) is correct.  Ingress filtering is for preventing
 > IP address spoofing of outer src address and dest address.
 
 But now IFF_LINK2 does not turn off ingress filter.
 Either kernel code or man page should be modified because one is=20
 inconsistent with the other.
 
 --=20
 EuropeSwPatentFree - http://EuropeSwPatentFree.hispalinux.es
 
 --xgyAXRrhYN0wYx8y
 Content-Type: application/pgp-signature; name="signature.asc"
 Content-Description: Digital signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.2.4 (GNU/Linux)
 
 iD8DBQFB9l5sAeZK4jlfl3cRAkiXAKCNOJJJ14hg5t38tx2peZDwNSPZxgCfY/nH
 EF+CLPc6lE3q577AsTnLjjM=
 =JyoO
 -----END PGP SIGNATURE-----
 
 --xgyAXRrhYN0wYx8y--