From owner-freebsd-bugs@FreeBSD.ORG Thu Dec 2 20:40:11 2010 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 54E76106567A for ; Thu, 2 Dec 2010 20:40:11 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 007AD8FC14 for ; Thu, 2 Dec 2010 20:40:08 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id oB2Ke7sD056961 for ; Thu, 2 Dec 2010 20:40:07 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id oB2Ke7E9056960; Thu, 2 Dec 2010 20:40:07 GMT (envelope-from gnats) Resent-Date: Thu, 2 Dec 2010 20:40:07 GMT Resent-Message-Id: <201012022040.oB2Ke7E9056960@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ted Sun Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7003F1065672 for ; Thu, 2 Dec 2010 20:34:32 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (unknown [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id 43E968FC24 for ; Thu, 2 Dec 2010 20:34:32 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.4/8.14.4) with ESMTP id oB2KYWXQ020918 for ; Thu, 2 Dec 2010 20:34:32 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.4/8.14.4/Submit) id oB2KYWrU020917; Thu, 2 Dec 2010 20:34:32 GMT (envelope-from nobody) Message-Id: <201012022034.oB2KYWrU020917@red.freebsd.org> Date: Thu, 2 Dec 2010 20:34:32 GMT From: Ted Sun To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/152791: ND, ICMPv6 Redirect vs Destination Cache failed in release 8.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Dec 2010 20:40:11 -0000 >Number: 152791 >Category: kern >Synopsis: ND, ICMPv6 Redirect vs Destination Cache failed in release 8.0 >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Dec 02 20:40:07 UTC 2010 >Closed-Date: >Last-Modified: >Originator: Ted Sun >Release: FreeBSD 8.0-RELEASE i386 >Organization: Datatek >Environment: FreeBSD fosters.datatekcorp.com 8.0-RELEASE FreeBSD 8.0-RELEASE #0: Thu Sep 9 14:52:35 EDT 2010 root@fosters.datatekcorp.com:/usr/obj/usr/src/sys/MYKERNEL i386 >Description: The running OS is a 8.0-RELEASE FreeBSD with the IP-SEC support on. Output of command "diff -U5 GENERIC MYKERNEL" at /usr/src/sys/i386/conf shows --------------------------------------------------------------------- --- GENERIC 2009-11-09 18:48:01.000000000 -0500 +++ MYKERNEL 2010-09-09 13:15:51.000000000 -0400 @@ -330,5 +330,9 @@ #device sbp # SCSI over FireWire (Requires scbus and da) device fwe # Ethernet over FireWire (non-standard!) device fwip # IP over FireWire (RFC 2734,3146) device dcons # Dumb console driver device dcons_crom # Configuration ROM for dcons + +#arndt added- IP-SEC support +device crypto +options IPSEC --------------------------------------------------------------------- After receiving an ICMPv6 redirect package with Option ICMPv6_TLL which contains TargetAddress == DestinationAddress == 3ffe:501:fff:109:200:ff:fe00:1c5. The "ndp -a" will output a corresponding entry as "3ffe:501:fff:109:200:ff:fe00:1c5 0:0:0:0:a9:a9 vr0 23h58m38s S" But the FreeBSD will continue to echo reply to the old MAC address 0:0:0:0:a0:a0 for IPv6 destination 3ffe:501:fff:109:200:ff:fe00:1c5 The correct echo reply should use the redirected MAC address 0:0:0:0:a9:a9. >How-To-Repeat: Needed test tool are the "IPv6 Conformance Test Tool v6eval-3.0.12.tar.gz or newer one" and the "ct-2.1.1.tar.gz" from "http://www.tahi.org/release". Set up the TAHI "IPv6 conformance Test For Neighbor discovery" on a BSD machine. Set up a IP-SEC enabled BSD 8.0 release PC as the NUT (node under test). Cross connect the TAHI and the NUT with ethernet cable. 1. Start the TAHI test by "make test". Test will fail at item 66 "Redirect vs Destination Cache; Redirect to a host" should fail. or .. 2. Start the TAHI test of item 66 only by "make AROPT='-s 66 -e 66' test". >Fix: >Release-Note: >Audit-Trail: >Unformatted: