Hosting Provided By

Re: kernel/2876: pf does not check v6 header in v6 option header

From: Daniel Hartmeier <daniel(at)benzedrine.cx>
Date: Thu Nov 07 2002 - 20:59:45 EST

The following reply was made to PR kernel/2876; it has been noted by GNATS.

From: Daniel Hartmeier <daniel@benzedrine.cx> To: hamajima@nagoya.ydc.co.jp
Cc: gnats@openbsd.org
Subject: Re: kernel/2876: pf does not check v6 header in v6 option header Date: Fri, 8 Nov 2002 01:23:30 +0100

On Mon, Aug 12, 2002 at 12:08:14PM +0900, hamajima@nagoya.ydc.co.jp wrote:

> >Number: 2876
> >Synopsis: pf does not check v6 header in v6 option header

 > 	xcast6 packet is v6 -> hop-by-hop -> v6 -> routing -> udp.
 > 	pf does not check second v6 header. so pf cannot get udp port.

Could you provide a tcpdump -vvvX of such a packet? pf skips IPv6 headers IPPROTO_HOPOPTS (0, 'Hop-by-hop option header') and IPPROTO_ROUTING (43, 'Routing header') and should find the UDP header.

Daniel Received on Thu Nov 7 21:01:53 2002

This message: [ Message body ]
Next message: Andrew Basterfield: "Re: kernel/2852: Kernel panic: lockmgr: LK_RELEASE of unlocked lock"
Previous message: Adam Skutt: "Re: kernel/2852: Kernel panic: lockmgr: LK_RELEASE of unlocked lock"
Maybe in reply to: hamajima(at)nagoya.ydc.co.jp: "kernel/2876: pf does not check v6 header in v6 option header"
In reply to hamajima(at)nagoya.ydc.co.jp: "kernel/2876: pf does not check v6 header in v6 option header"
Reply: HAMAJIMA Katsuomi: "Re: kernel/2876: pf does not check v6 header in v6 option header"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 13:29:37 EDT