netdev - Re: [PATCH] ipv6: Do not use routes from locally generated RAs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20111024.183715.460582802706449552.davem@davemloft.net>
Date:	Mon, 24 Oct 2011 18:37:15 -0400 (EDT)
From:	David Miller <davem@...emloft.net>
To:	andi@...lax.com
Cc:	netdev@...r.kernel.org
Subject: Re: [PATCH] ipv6: Do not use routes from locally generated RAs

From: Andreas Hofmeister <andi@...lax.com>
Date: Sun, 23 Oct 2011 18:41:11 +0200

> When hybrid mode is enabled (accept_ra == 2), the kernel also sees RAs
> generated locally. This is useful since it allows the kernel to auto-configure
> its own interface addresses.
> 
> However, if 'accept_ra_defrtr' and/or 'accept_ra_rtr_pref' are set and the
> locally generated RAs announce the default route and/or other route information,
> the kernel happily inserts bogus routes with its own address as gateway.
> 
> With this patch, adding routes from an RA will be skiped when the RAs source
> address matches any local address, just as if 'accept_ra_defrtr' and
> 'accept_ra_rtr_pref' were set to 0.

Please make a fresh full resubmission of this patch and add an
appropriate Signed-off-by: tag to your commit message.

Thanks.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html