lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <20100328131112.GA15984@gondor.apana.org.au> Date: Sun, 28 Mar 2010 21:11:12 +0800 From: Herbert Xu <herbert@...dor.apana.org.au> To: David Miller <davem@...emloft.net> Cc: netdev@...r.kernel.org Subject: Re: [PATCH RFC] inetpeer: Support ipv6 addresses. On Sun, Mar 28, 2010 at 05:53:12AM -0700, David Miller wrote: > From: Herbert Xu <herbert@...dor.apana.org.au> > Date: Sun, 28 Mar 2010 16:22:50 +0800 > > > My main question is how do we deal with source-address policy > > routing in a host cache? > > We don't, the same like how we don't handle fully specified > IPSEC policies deciding upon the route. I thought we did handle source-address policy routing for PMTU messages at least. I just checked ip_rt_frag_needed and it does if (rth->fl.fl4_dst != daddr || rth->fl.fl4_src != skeys[i] || rth->rt_dst != daddr || rth->rt_src != iph->saddr || rth->fl.oif != ikeys[k] || rth->fl.iif != 0 || dst_metric_locked(&rth->u.dst, RTAX_MTU) || !net_eq(dev_net(rth->u.dst.dev), net) || rt_is_expired(rth)) continue; Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@...dor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists