From owner-freebsd-bugs@FreeBSD.ORG Thu Jan 20 11:10:32 2005 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C9B5E16A4CE for ; Thu, 20 Jan 2005 11:10:32 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id B470F43D4C for ; Thu, 20 Jan 2005 11:10:32 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.1/8.13.1) with ESMTP id j0KBAWE7099518 for ; Thu, 20 Jan 2005 11:10:32 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.1/8.13.1/Submit) id j0KBAWox099517; Thu, 20 Jan 2005 11:10:32 GMT (envelope-from gnats) Date: Thu, 20 Jan 2005 11:10:32 GMT Message-Id: <200501201110.j0KBAWox099517@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Hajimu UMEMOTO Subject: Re: kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs? X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Hajimu UMEMOTO List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jan 2005 11:10:32 -0000 The following reply was made to PR kern/75121; it has been noted by GNATS. From: Hajimu UMEMOTO To: FreeBSD-gnats-submit@freebsd.org Cc: Antonio Tapiador del Dujo , Gleb Smirnoff Subject: Re: kern/75121: Wrong behaviour of IFF_LINK2 bit in 6in6 gifs? Date: Thu, 20 Jan 2005 19:57:12 +0900 Hi, A> > The IFF_LINK2 means that incoming tunnel packets may come from interface A> > different to interface we use for sending out tunnel packets. A> A> gif(4) man page talks about ingress filtering: A> "Ingress filtering can be turned off by IFF_LINK2 bit." A> that has to do with source addresses (RFC 2893, section 4.3) A> Then maybe this is a gif(4) man page bug. glebius> Yes, it is I think. Section 4.3 speaks about other kind of filtering. No, manpage of gif(4) is correct. Ingress filtering is for preventing IP address spoofing of outer src address and dest address. Sincerely, -- Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan ume@mahoroba.org ume@{,jp.}FreeBSD.org http://www.imasy.org/~ume/