Date: Sat, 24 Sep 2011 14:30:29 GMT From: Ryan Steinmetz <rpsfa@rit.edu> To: freebsd-gnats-submit@FreeBSD.org Subject: bin/160975: ipfw's uid matching doesn't function with IPv6 Message-ID: <201109241430.p8OEUTft058646@red.freebsd.org> Resent-Message-ID: <201109241440.p8OEe0WP049856@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 160975
>Category: bin
>Synopsis: ipfw's uid matching doesn't function with IPv6
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sat Sep 24 14:40:00 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator: Ryan Steinmetz
>Release: 8.2-RELEASE
>Organization:
Rochester Institute of Technology
>Environment:
>Description:
ipfw currently ignores uid checking for IPv6 rules.
For example:
ipfw add allow tcp from me6 to any dst-port 80 out keep-state uid root
does not work as the ipfw code currently doesn't support doing this.
in ip_fw2.c:
if (is_ipv6) /* XXX to be fixed later */
break;
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201109241430.p8OEUTft058646>