From owner-freebsd-bugs@FreeBSD.ORG Tue Jan 25 15:00:41 2005 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C118F16A4D7 for ; Tue, 25 Jan 2005 15:00:41 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id A27A143D1D for ; Tue, 25 Jan 2005 15:00:41 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.1/8.13.1) with ESMTP id j0PF0f2Q065072 for ; Tue, 25 Jan 2005 15:00:41 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.1/8.13.1/Submit) id j0PF0fv6065069; Tue, 25 Jan 2005 15:00:41 GMT (envelope-from gnats) Date: Tue, 25 Jan 2005 15:00:41 GMT Message-Id: <200501251500.j0PF0fv6065069@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Antonio Tapiador del Dujo Subject: Re: kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs? X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Antonio Tapiador del Dujo List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jan 2005 15:00:41 -0000 The following reply was made to PR kern/75121; it has been noted by GNATS. From: Antonio Tapiador del Dujo To: Hajimu UMEMOTO Cc: FreeBSD-gnats-submit@freebsd.org, Antonio Tapiador del Dujo , Gleb Smirnoff Subject: Re: kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs? Date: Tue, 25 Jan 2005 15:57:48 +0100 --xgyAXRrhYN0wYx8y Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable El jueves, 20 de enero de 2005, a las 19:57:12, Hajimu UMEMOTO escribi=F3: > Hi, >=20 > A> > The IFF_LINK2 means that incoming tunnel packets may come from inte= rface > A> > different to interface we use for sending out tunnel packets. > A>=20 > A> gif(4) man page talks about ingress filtering: > A> "Ingress filtering can be turned off by IFF_LINK2 bit." > A> that has to do with source addresses (RFC 2893, section 4.3) > A> Then maybe this is a gif(4) man page bug.=20 > =20 > glebius> Yes, it is I think. Section 4.3 speaks about other kind of filt= ering. >=20 > No, manpage of gif(4) is correct. Ingress filtering is for preventing > IP address spoofing of outer src address and dest address. But now IFF_LINK2 does not turn off ingress filter. Either kernel code or man page should be modified because one is=20 inconsistent with the other. --=20 EuropeSwPatentFree - http://EuropeSwPatentFree.hispalinux.es --xgyAXRrhYN0wYx8y Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFB9l5sAeZK4jlfl3cRAkiXAKCNOJJJ14hg5t38tx2peZDwNSPZxgCfY/nH EF+CLPc6lE3q577AsTnLjjM= =JyoO -----END PGP SIGNATURE----- --xgyAXRrhYN0wYx8y--