Date: Tue, 18 Nov 2008 12:49:11 -0500 From: Stephen Clark <sclark46@earthlink.net> To: freebsd-net@freebsd.org Subject: Re: FreeBSD 6.3 gre and tracerouteo Message-ID: <49230017.3050409@earthlink.net> In-Reply-To: <20081118173337.GA19402@verio.net> References: <491C2235.4090509@earthlink.net> <1226589468.1976.12.camel@wombat.2hip.net> <491C4EC2.2000802@earthlink.net> <491D6CED.50006@earthlink.net> <491DC28E.80804@elischer.org> <1226688153.1719.23.camel@squirrel.corp.cox.com> <20081115102746.K61259@maildrop.int.zabbadoz.net> <4921DBB4.4060505@earthlink.net> <20081118113823.T61259@maildrop.int.zabbadoz.net> <4922BF6A.1000108@earthlink.net> <20081118173337.GA19402@verio.net>
next in thread | previous in thread | raw e-mail | index | archive | help
David DeSimone wrote: > Stephen Clark <sclark46@earthlink.net> wrote: >> switch (proto) { >> case IPPROTO_GRE: >> hlen += sizeof(struct gre_h); >> + >> + m->m_flags &= ~(M_DECRYPTED); >> + > > Are there security implications from removing this flag? > That is a very good question. I was wondering the same thing myself. Hopefully someone with a better understanding will comment on it. Steve -- "They that give up essential liberty to obtain temporary safety, deserve neither liberty nor safety." (Ben Franklin) "The course of history shows that as a government grows, liberty decreases." (Thomas Jefferson)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?49230017.3050409>