netdev - Fw: [Bug 99081] New: Bridge multicast snooping breaks ICMPv6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20150528073539.2619267a@urahara>
Date:	Thu, 28 May 2015 07:35:39 -0700
From:	Stephen Hemminger <stephen@...workplumber.org>
To:	netdev@...r.kernel.org
Subject: Fw: [Bug 99081] New: Bridge multicast snooping breaks ICMPv6

Begin forwarded message:

Date: Thu, 28 May 2015 10:34:55 +0000
From: "bugzilla-daemon@...zilla.kernel.org" <bugzilla-daemon@...zilla.kernel.org>
To: "shemminger@...ux-foundation.org" <shemminger@...ux-foundation.org>
Subject: [Bug 99081] New: Bridge multicast snooping breaks ICMPv6

https://bugzilla.kernel.org/show_bug.cgi?id=99081

            Bug ID: 99081
           Summary: Bridge multicast snooping breaks ICMPv6
           Product: Networking
           Version: 2.5
    Kernel Version: 4.0.4
          Hardware: All
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Other
          Assignee: shemminger@...ux-foundation.org
          Reporter: sgunderson@...foot.com
        Regression: No

Hi,

I've seen this reported many times around the net, with no definite solution;
since I got hit by it again and now used the latest kernel, I thought the best
place would be the kernel Bugzilla.

I have a bridge br0 with eth0 on it, and then some tap devices from KVM guests.
In this situation, by default, I don't have IPv6. I can't ping anything because
ND fails. I've seen this over multiple kernel versions for years, so I'm fairly
certain this is not something about my specific setup.

The common workaround is:

 echo 0 > /sys/devices/virtual/net/br0/bridge/multicast_snooping 

which immediately makes IPv6 work well again.

IPv6 unicast is unaffected; only multicast (ie., ND) seems to have the problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html