NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: kern/52074: -current npf map directive broken

On May 10,  1:22pm, (Roy Marples) wrote:
-- Subject: Re: kern/52074: -current npf map directive broken

| > You also shouldn't be able to send from an address you don't own
| > (generally - a router has to be able to forward, as distinct from
| > originate, packets from anywhere of course).
| This is what my initial code did.
| What I'm more concerned about though is the panic.
| I think we should revert xtos's change and solve the panic, as this just
| masks over it.

This is not about fixing the panic. It is about the ability of the packet
filter to construct packets for which the origin interface cannot be
determined from the packet source address.


Home | Main Index | Thread Index | Old Index