From owner-freebsd-hackers  Wed Dec 19  7:29:32 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from niwun.pair.com (niwun.pair.com [209.68.2.70])
	by hub.freebsd.org (Postfix) with SMTP id 783C637B41A
	for <hackers@freebsd.org>; Wed, 19 Dec 2001 07:29:26 -0800 (PST)
Received: (qmail 39841 invoked by uid 3193); 19 Dec 2001 15:29:25 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 19 Dec 2001 15:29:25 -0000
Date: Wed, 19 Dec 2001 10:29:25 -0500 (EST)
From: Mike Silbersack <silby@silby.com>
X-Sender:  <silby@niwun.pair.com>
To: Yar Tikhiy <yar@freebsd.org>
Cc: <net@freebsd.org>, <hackers@freebsd.org>
Subject: Re: Processing IP options reveals IPSTEALH router
In-Reply-To: <20011219181929.A20425@comp.chem.msu.su>
Message-ID: <Pine.BSF.4.30.0112191027410.24218-100000@niwun.pair.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG


On Wed, 19 Dec 2001, Yar Tikhiy wrote:

> Hi there,
>
> I ran into an absolutely clear, but year-old PR pointing out that
> a router in the IPSTEALTH mode will reveal itself when processing
> IP options: kern/23123.
>
> The fix proposed seems clean and right to me: don't do IP options
> at all when in the IPSTEALTH mode.  Does anyone have objections?
> If no, I'll commit the fix.
>
> --
> Yar

The fix looks good on the surface, but it probably should be tested before
committing just to make sure.

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message