netdev - Re: Linux IPV6_SUBTREES not functioning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 6 Aug 2013 10:46:43 +0200
From:	Teco Boot <teco@...-net.nl>
To:	Hannes Frederic Sowa <hannes@...essinduktion.org>
Cc:	netdev@...r.kernel.org, boutier@....univ-paris-diderot.fr
Subject: Re: Linux IPV6_SUBTREES not functioning

Hi Hannes,

Yes problems with real traffic, with CORE (open source mobile ad hoc network emulator currently maintained by NRL and Boeing).
Mattieu had same problems and therefore stepped to the ip rule. Most, if not all, take this ip rule hack. But then, for each and every source prefix a complete routing table is needed. This is a bad thing and shall be avoided.

Do you think it should work? Have it working? If so, I want to reproduce.

Thanks, Teco

Op 6 aug. 2013, om 10:30 heeft Hannes Frederic Sowa <hannes@...essinduktion.org> het volgende geschreven:

> Hi!
> 
> On Fri, Aug 02, 2013 at 12:15:03PM +0200, Teco Boot wrote:
>> For destination & source address routing, I prefer the single routing table approach with IPV6_SUBTREES over the multiple tables with ip rules approach.
>> Can some take a look at my findings? It looks broken. It seems the source address check in route cache is missing.
> 
> Have you verified this behaviour with actual network traffic?
> 
> Greetings,
> 
>  Hannes
> 

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html