Date: Wed, 2 Apr 2003 12:16:56 -0500 (EST) From: Joshua Coombs <kurlon@x386.net> To: FreeBSD-gnats-submit@FreeBSD.org Cc: freebsd-questions@FreeBSD.org Subject: standards/50547: ips.evil counter fails to incriment Message-ID: <200304021716.h32HGuSa000284@E-Machine.x386.net> Resent-Message-ID: <200304021730.h32HU3X8025392@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 50547 >Category: standards >Synopsis: ips.evil counter fails to incriment >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-standards >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Apr 02 09:30:03 PST 2003 >Closed-Date: >Last-Modified: >Originator: Joshua Coombs >Release: FreeBSD 4.7-RELEASE-p10 i386 >Organization: x386.net >Environment: System: FreeBSD E-Machine.x386.net 4.7-RELEASE-p10 FreeBSD 4.7-RELEASE-p10 #0: Tue Apr 1 18:52:17 EST 2003 root@E-Machine.x386.net:/usr/obj/usr/src/sys/GENERIC i386 >Description: After applying ftp://ftp.jurai.net/users/winter/patches/rfc3514-stable.patch and rebuilding world/kernel, rfc 3514 support appears to function, however the provided interface for tracking recieved 'evil' packets does not appear to work. >How-To-Repeat: apply the patch rebuild world/kernel enable rfc3514 support sysctl -w net.inet.ip.rfc3514=1 verify hear_no_evil and speak_no_evil are disabled sysctl -w net.inet.ip.hear_no_evil=0 sysctl -w net.inet.ip.speak_no_evil=0 generate 'evil' packets ping -c 10 -E localhost see if the system noticed the 'evil' packets netstat -s | grep -i evil Currently the counter stays at 0 although it responds to 'evil' pings. >Fix: >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200304021716.h32HGuSa000284>