]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Remove the check for packets with broadcast source from if_gif's encapcheck.
authorae <ae@FreeBSD.org>
Fri, 31 Oct 2014 15:23:24 +0000 (15:23 +0000)
committerae <ae@FreeBSD.org>
Fri, 31 Oct 2014 15:23:24 +0000 (15:23 +0000)
commit80e4a446b947f0cd48b81c1daf1a8379819bb9ca
tree43af7e59b14bf6c7ee71e1a64e11c1c4ff4ef402
parent134ada364603eed6996aa8853e91fa40cce8dda9
Remove the check for packets with broadcast source from if_gif's encapcheck.

The check was recommened in the draft-ietf-ngtrans-mech-05.txt. But it isn't
clear, should it compare the source with all direct broadcast addresses in the
system or not.
RFC 4213 says it is enough to verify that the source address is the address
of the encapsulator, as configured on the decapsulator. And this verification
can be extended by administrator with any other forms of IPv4 ingress filtering.

Discussed with: glebius, melifaro
Sponsored by: Yandex LLC
sys/netinet/in_gif.c