[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 11 Oct 2008 00:45:36 +0200
From: Benny Amorsen <benny+usenet@...rsen.dk>
To: Jarod Neuner <j.neuner@...workharbor.com>
Cc: Patrick McHardy <kaber@...sh.net>,
David Miller <davem@...emloft.net>,
"netdev\@vger.kernel.org" <netdev@...r.kernel.org>
Subject: Re: IGMP sent to Foreign VLAN
Jarod Neuner <j.neuner@...workharbor.com> writes:
> My original thought was to do something like this in net/core/dev.c
> using a method similar to handle_bridge or handle_macvlen. So, if the
> packet doesn't get handled by the ptype_base list and IFF_ALLVLAN is
> set, then strip the header and let the packet through. The sticky point
> would be whether or not this policy should be enabled by default, as it
> seems to be in other network stacks.
So if I tcpdump on the base device, IFF_ALLVLAN gets set and packets
from unknown VLAN's suddenly lose their VLAN headers? That's a
security problem.
/Benny
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists