netdev - Re: [PATCH net-next] ipv6: Add icmp_echo_ignore

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 19 Mar 2019 06:10:20 -0700
From:   Eric Dumazet <eric.dumazet@...il.com>
To:     Stephen Suryaputra <ssuryaextr@...il.com>, netdev@...r.kernel.org
Subject: Re: [PATCH net-next] ipv6: Add icmp_echo_ignore_multicast support for
 ICMPv6



On 03/19/2019 05:45 AM, Stephen Suryaputra wrote:
> IPv4 has icmp_echo_ignore_broadcast to prevent responding to broadcast pings.
> IPv6 needs a similar mechanism.
> 


...

> diff --git a/include/uapi/linux/sysctl.h b/include/uapi/linux/sysctl.h
> index 87aa2a6d9125..bd83ddedc014 100644
> --- a/include/uapi/linux/sysctl.h
> +++ b/include/uapi/linux/sysctl.h
> @@ -577,7 +577,8 @@ enum {
>  /* /proc/sys/net/ipv6/icmp */
>  enum {
>  	NET_IPV6_ICMP_RATELIMIT = 1,
> -	NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2
> +	NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2,
> +	NET_IPV6_ICMP_ECHO_IGNORE_MULTICAST = 3
>  };
>  
>  /* /proc/sys/net/<protocol>/neigh/<dev> */

This part is probably not needed.