Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Dec 2001 10:29:25 -0500 (EST)
From:      Mike Silbersack <silby@silby.com>
To:        Yar Tikhiy <yar@freebsd.org>
Cc:        <net@freebsd.org>, <hackers@freebsd.org>
Subject:   Re: Processing IP options reveals IPSTEALH router
Message-ID:  <Pine.BSF.4.30.0112191027410.24218-100000@niwun.pair.com>
In-Reply-To: <20011219181929.A20425@comp.chem.msu.su>

next in thread | previous in thread | raw e-mail | index | archive | help

On Wed, 19 Dec 2001, Yar Tikhiy wrote:

> Hi there,
>
> I ran into an absolutely clear, but year-old PR pointing out that
> a router in the IPSTEALTH mode will reveal itself when processing
> IP options: kern/23123.
>
> The fix proposed seems clean and right to me: don't do IP options
> at all when in the IPSTEALTH mode.  Does anyone have objections?
> If no, I'll commit the fix.
>
> --
> Yar

The fix looks good on the surface, but it probably should be tested before
committing just to make sure.

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.30.0112191027410.24218-100000>