Hello, When net.inet.ip.check_interface was MFCed to RELENG_4 3+ years ago in rev. 1.130.2.17 ip_input.c it was 1 by default but shortly changed to 0 (accidently?) in rev. 1.130.2.20 in RELENG_4 only. Among with the fact this knob is not documented it breaks POLA especially in bridge enviroment. I suggest to synchronize HEAD and RELENG_5 with RELENG_4 and make an MFS. I do not like the idea to change net.inet.ip.check_interface to 1 by default in RELENG_4 for the obvious reasons. Any objections? Index: sys/netinet/ip_input.c =================================================================== RCS file: /home/ncvs/src/sys/netinet/ip_input.c,v retrieving revision 1.289 diff -u -r1.289 ip_input.c --- sys/netinet/ip_input.c 16 Sep 2004 18:33:39 -0000 1.289 +++ sys/netinet/ip_input.c 19 Sep 2004 18:35:31 -0000 _at__at_ -148,7 +148,7 _at__at_ * to the loopback interface instead of the interface where the * packets for those addresses are received. */ -static int ip_checkinterface = 1; +static int ip_checkinterface = 0; SYSCTL_INT(_net_inet_ip, OID_AUTO, check_interface, CTLFLAG_RW, &ip_checkinterface, 0, "Verify packet arrives on correct interface"); %%% -- Maxim KonovalovReceived on Sun Sep 19 2004 - 16:41:30 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:12 UTC