Date: Sun, 1 Jul 2001 02:57:37 -0700 (PDT) From: Igor M Podlesny <poige@morning.ru> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/28567: incorrect implemenatition of IPFW's 'me'-keyword Message-ID: <200107010957.f619vbW09470@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 28567 >Category: misc >Synopsis: incorrect implemenatition of IPFW's 'me'-keyword >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Jul 01 03:00:02 PDT 2001 >Closed-Date: >Last-Modified: >Originator: Igor M Podlesny >Release: 4.3 >Organization: Morning Network Ltd >Environment: FreeBSD hop-gw.morning.ru 4.3-STABLE FreeBSD 4.3-STABLE #3: Sat May 19 12:34:21 KRAST 2001 root@hop-w.morning.ru:/usr/src/sys/compile/hop i386 >Description: using newly implemented feature 'me' of ipfw has a sideeffect for pointopoint interfaces -- the remote addr. is classified as ours (i.e., matches 'me') >How-To-Repeat: should have any PTP-interface and set your firewall up using 'me'. >Fix: avoid using INADDR_TO_IFP (/usr/src/sys/netinet/in_var.h) for 'me' feature in ip_fw.c cause it finds the corresponding interface for any kind of addresses without respect to is it remote or local. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200107010957.f619vbW09470>