Date: Sun, 5 Oct 2014 23:24:10 -0700 From: Adrian Chadd <adrian@freebsd.org> To: el kalin <kalin@el.net> Cc: freebsd-security@freebsd.org, freebsd-net <freebsd-net@freebsd.org>, Colin Percival <cperciva@freebsd.org>, Brandon Vincent <Brandon.Vincent@asu.edu> Subject: Re: remote host accepts loose source routed IP packets Message-ID: <CAJ-Vmo=VUVSU66qbVOxB%2B=nVvDz8B9byE-%2BfUS7btGFzvjoa-Q@mail.gmail.com> In-Reply-To: <CAMJXocmJ%2BnKu9VjSiXYw%2BaqLxRnZK_XSdPhLYt3wiZRQ0wfY8w@mail.gmail.com> References: <CAMJXoc=s=Ud52NJ0dbK-6qKEcszbni4bi1MA8mgRtQSo=2Uuyw@mail.gmail.com> <CAMJXoc=5gs17ZgQ7LYALwKFRPN5hQ38OOuBtDk=EjZzi82EFMA@mail.gmail.com> <CAMJXockiQ%2B0gFbxSY43OyMbNqTjdzR1i16w%2Byiqmm=cQ8HR=pQ@mail.gmail.com> <CAJm423-mFg%2BzU_RB%2Bkp8wmp-V31onJJV0K4FUOLcv%2BczAOCKXA@mail.gmail.com> <CAMJXock7iYsh%2BMXMcxZjaTNg6cgm7g%2BHa4=ZQJqLq0DtzK5BWQ@mail.gmail.com> <CAMJXocm=2D_F8uN1JCKjMTdQvkRhWv9Owd8=UMhYOpKK=drSHw@mail.gmail.com> <CAMJXocnJRGSr%2BLy2dEnwZweg1hCN6LxtHBtjE=OEed_qoeShrA@mail.gmail.com> <CAJ-VmonFr4eAWqS0tngV-M7m_aUHv%2B9qOVny3o5Xt0CyuxwJ8w@mail.gmail.com> <CAJm4238LSs5L%2BmtrbvepC3Hi7EvpWvJwmUTFt7j0X3rmavsdtg@mail.gmail.com> <CAMJXocmJ%2BnKu9VjSiXYw%2BaqLxRnZK_XSdPhLYt3wiZRQ0wfY8w@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, I'm just going off what I saw in the code. Maybe the code changed and the bug was introduced. I suggest: (a) use ipfw to filter them for now; and (b) file a PR (https://bugs.freebsd.org/submit/) so it's not forgotten. Thanks! -a
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAJ-Vmo=VUVSU66qbVOxB%2B=nVvDz8B9byE-%2BfUS7btGFzvjoa-Q>