netdev - Re: Issue with GRE tunnel, created with "local any" on kernel 3.14

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20140731124737.442be6f4c55fec059028eae2@qrator.net>
Date:	Thu, 31 Jul 2014 12:47:37 +0400
From:	Dmitry Popov <ixaphire@...tor.net>
To:	Sergey Popov <pinkbyte@...too.org>
Cc:	netdev@...r.kernel.org
Subject: Re: Issue with GRE tunnel, created with "local any" on kernel 3.14

On Thu, 31 Jul 2014 10:29:00 +0400
Sergey Popov <pinkbyte@...too.org> wrote:

> > I have no patch to fix this issue, but as a workaround, you can use 
> > ip tunnel change tun_test tos inherit.
> 
> Thanks, your workaround works as expected if tos value defined
> explicitly. Though, I do not understand why: iproute2 documentation says
> that default tos value in 'ip tunnel' command is already 'inherit'.

man ip-tunnel says default tos is 00, and that's true. If you're about *.tex
files under iproute2.git/doc, they are more than 10 years old, I doubt if they
are maintained. Otherwise I don't know where you found it.

This workaround works because setting tos=inherit disables tunnel route cache,
which is buggy in your release (it doesn't cache source address).

Btw, thanks for the report, David has accepted the patch today, commit
95cb574 (ip_tunnel(ipv4): fix tunnels with "local any remote $remote_ip"), so
I think next kernel releases will have it.

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html