Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Sep 2001 00:17:14 -0400
From:      Joe Abley <jabley@automagic.org>
To:        Juha Saarinen <juha@saarinen.org>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: 127/8 continued
Message-ID:  <20010924001714.Y4205@buffoon.automagic.org>
In-Reply-To: <00ca01c144ae$53440710$0a01a8c0@den2>
References:  <00ca01c144ae$53440710$0a01a8c0@den2>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Sep 24, 2001 at 04:06:45PM +1200, Juha Saarinen wrote:
> Misunderstood what Lamont was trying to show earlier... but he's right:
> FreeBSD sends 127/8 out on the 'Net:

I don't think FreeBSD is non-compliant for sending packets with
destination 127/8 out onto the net, but I guess it could make it
harder for users to send packets with moronic destinations out.

--- rc.network.orig     Mon Sep 24 00:08:17 2001
+++ rc.network  Mon Sep 24 00:14:05 2001
@@ -346,6 +346,13 @@
                done
        fi
 
+       # Add a blackhole static route for 127/8, since packets with
+       # that destination should be caged up and starved
+       lo0_inet=$(ifconfig lo0 | awk '($1 == "inet") { print $2; exit; }')
+       if [ -n "${lo0_inet}" ]; then
+               route add 127.0.0.0 -netmask 255.0.0.0 ${lo0_inet} -blackhole
+       fi
+
        echo -n 'Additional routing options:'
        case ${tcp_extensions} in
        [Yy][Ee][Ss] | '')


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010924001714.Y4205>