From owner-freebsd-current@FreeBSD.ORG  Fri Sep 19 11:33:20 2008
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 1260B1065673
	for <freebsd-current@FreeBSD.org>; Fri, 19 Sep 2008 11:33:20 +0000 (UTC)
	(envelope-from sobomax@FreeBSD.org)
Received: from sippysoft.com (gk1.360sip.com [72.236.70.240])
	by mx1.freebsd.org (Postfix) with ESMTP id D218E8FC17
	for <freebsd-current@FreeBSD.org>; Fri, 19 Sep 2008 11:33:19 +0000 (UTC)
	(envelope-from sobomax@FreeBSD.org)
Received: from [192.168.0.61] ([204.244.149.125]) (authenticated bits=0)
	by sippysoft.com (8.13.8/8.13.8) with ESMTP id m8JBXIjZ054042
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Fri, 19 Sep 2008 04:33:19 -0700 (PDT)
	(envelope-from sobomax@FreeBSD.org)
Message-ID: <48D38DFF.8000803@FreeBSD.org>
Date: Fri, 19 Sep 2008 04:33:19 -0700
From: Maxim Sobolev <sobomax@FreeBSD.org>
Organization: Sippy Software, Inc.
User-Agent: Thunderbird 2.0.0.16 (Windows/20080708)
MIME-Version: 1.0
To: Alexey Shuvaev <shuvaev@physik.uni-wuerzburg.de>
References: <48D2F942.4070801@FreeBSD.org>
	<20080919084201.GD44330@wep4035.physik.uni-wuerzburg.de>
In-Reply-To: <20080919084201.GD44330@wep4035.physik.uni-wuerzburg.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-current@FreeBSD.org
Subject: Re: Interface auto-cloning bug or feature?
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Sep 2008 11:33:20 -0000

Alexey Shuvaev wrote:
>> [root@sp1 /usr/home/sobomax]# ifconfig -a
>> tun0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
>> tun1: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
>> tun2: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
>> tun3: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
>>
> Me too.
> I have seen that using ppp(8) and security/vpnc.

That what has caused me to look into this issue. You can find patch for 
security/vpnc to prevent unbounded interface cloning here:

http://sobomax.sippysoft.com/~sobomax/vpnc.diff

-Maxim