Date: Wed, 2 Apr 2003 12:16:56 -0500 (EST) From: Joshua Coombs <kurlon@x386.net> To: FreeBSD-gnats-submit@freebsd.org Cc: freebsd-questions@freebsd.org Subject: ips.evil counter fails to incriment Message-ID: <200304021716.h32HGuSa000284@E-Machine.x386.net>
next in thread | raw e-mail | index | archive | help
>Submitter-Id: current-users >Originator: Joshua Coombs >Organization: x386.net >Confidential: no >Synopsis: ips.evil counter fails to incriment >Severity: serious >Priority: medium >Category: standards >Class: sw-bug >Release: FreeBSD 4.7-RELEASE-p10 i386 >Environment: System: FreeBSD E-Machine.x386.net 4.7-RELEASE-p10 FreeBSD 4.7-RELEASE-p10 #0: Tue Apr 1 18:52:17 EST 2003 root@E-Machine.x386.net:/usr/obj/usr/src/sys/GENERIC i386 >Description: After applying ftp://ftp.jurai.net/users/winter/patches/rfc3514-stable.patch and rebuilding world/kernel, rfc 3514 support appears to function, however the provided interface for tracking recieved 'evil' packets does not appear to work. >How-To-Repeat: apply the patch rebuild world/kernel enable rfc3514 support sysctl -w net.inet.ip.rfc3514=1 verify hear_no_evil and speak_no_evil are disabled sysctl -w net.inet.ip.hear_no_evil=0 sysctl -w net.inet.ip.speak_no_evil=0 generate 'evil' packets ping -c 10 -E localhost see if the system noticed the 'evil' packets netstat -s | grep -i evil Currently the counter stays at 0 although it responds to 'evil' pings. >Fix:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200304021716.h32HGuSa000284>