From owner-freebsd-net@FreeBSD.ORG Thu Apr 16 07:52:46 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DCFEC1065675 for ; Thu, 16 Apr 2009 07:52:46 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: from mail-fx0-f167.google.com (mail-fx0-f167.google.com [209.85.220.167]) by mx1.freebsd.org (Postfix) with ESMTP id 467438FC1D for ; Thu, 16 Apr 2009 07:52:45 +0000 (UTC) (envelope-from alexey.blinkov@gmail.com) Received: by fxm11 with SMTP id 11so262918fxm.43 for ; Thu, 16 Apr 2009 00:52:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=i0CstgGCrJFtoaeSoa2Q/hyQjiM3k8hVaFC6gINW5so=; b=UmcFYnobia7F8FKYNWk27aQIUnCf4X4UQ9ZBMkQMSOdtWQZHA1QK957WuV6URAdf/r RlnyHJvww5Dqcfi9gr0zzuLjw8SN08vH0kTRT8R1hVcaijyJYadpAHjWwWaAr9EPMs6V IMSk/xHCKesbysti1EzxZFC/zfhR7gMZMwOVo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=FrzFReI1LQR2z0UUgpqUm1s/jJKN1catOrRsqbmZw0Iw1SoorIjxyeAiIALherXdzp ATbAxZ7hgp/5i39wTYdChbgKTXXq6JiSuD4IwBUjglcU6VTR/kCvChj9Q3Bx5ppzNjBC 2jMsYa+HMklndoP+kgesyG1O6fd693KBc0zgk= MIME-Version: 1.0 Received: by 10.86.26.11 with SMTP id 11mr840882fgz.33.1239868365289; Thu, 16 Apr 2009 00:52:45 -0700 (PDT) In-Reply-To: <49E678E6.102@incunabulum.net> References: <2d934d80904150642r585049b4wadfdfc82a3d8c7fc@mail.gmail.com> <20090415144956.T15361@maildrop.int.zabbadoz.net> <2d934d80904150807p732bce43gc110fe6ae042507d@mail.gmail.com> <49E678E6.102@incunabulum.net> Date: Thu, 16 Apr 2009 10:52:45 +0300 Message-ID: <2d934d80904160052u70980215v1a32b07d4b1168f@mail.gmail.com> From: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0JHQu9C40L3QutC+0LI=?= To: Bruce Simpson Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: "Bjoern A. Zeeb" , freebsd-net Subject: Re: MD5 authentication in quagga X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2009 07:52:47 -0000 16 =D0=B0=D0=BF=D1=80=D0=B5=D0=BB=D1=8F 2009 =D0=B3. 3:16 =D0=BF=D0=BE=D0= =BB=D1=8C=D0=B7=D0=BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C Bruce Simpson =D0=BD=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D0=BB: > =D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B5=D0=B9 =D0=91=D0=BB=D0=B8=D0=BD=D0=BA= =D0=BE=D0=B2 wrote: >> >> If modelling ideal situation, then: >> >> md5 password doesn`t match or empty, then peering must be closed... >> >> Now md5 working only for outgoing packets, not for input. And peering >> not closed if password miss or not match. because bsd not check >> incoming packets, i think... >> > > I thought someone had fixed this ages ago? > I seem to remember someone had merged some changes to what I'd originally > done for Sentex from NetBSD... but I could be wrong. > > cheers, > BMS > I don`t know about how kernel works with md5 hashing, because i`m newly in bsd... --=20 =D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0=BD=D0=B8=D0=B5=D0=BC =D0=90=D0=BB= =D0=B5=D0=BA=D1=81=D0=B5=D0=B9 =D0=91=D0=BB=D0=B8=D0=BD=D0=BA=D0=BE=D0=B2