linux-kernel - Re: (Solved) Linux router responds to any ARP query when iproute2 xfrm policies are configured for an IPSec tunnel. What's going on?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <33990f03-fdaa-34d5-9a54-4c0b2ced7c75@iki.fi>
Date:   Fri, 17 Jan 2020 18:50:05 +0200
From:   Jarkko Oranen <oranenj@....fi>
To:     linux-kernel@...r.kernel.org
Subject: Re: (Solved) Linux router responds to any ARP query when iproute2
 xfrm policies are configured for an IPSec tunnel. What's going on?

Hi,

hopefully I got the In-Reply-To header right.

Turns out that while I thought I had disabled charon's fake-arp plugin, 
it was silently loading configuration from /etc/strongswan/charon I 
didn't expect it to load and despite the plugin being enabled, it made 
no indication that this is the case. I'll leave this here for Google in 
case someone else stubs their toe on this.

Sorry for the noise.

--

Jarkko