Re: port-xen/59460: Xen netback sends data debian domU considers malicious

["Michael van Elst via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR port-xen/59460; it has been noted by GNATS.

From: mlelstv%serpens.de@localhost (Michael van Elst)
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: port-xen/59460: Xen netback sends data debian domU considers malicious
Date: Sat, 7 Jun 2025 09:26:53 -0000 (UTC)

 el%assimilation2.clifford.lol@localhost (Eleanor Clifford) writes:
 
 >	Jun 06 11:44:31 mondas kernel: xen_netfront: Initialising Xen virtual ethernet driver
 >	Jun 06 11:44:37 mondas kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
 >	Jun 06 11:44:37 mondas kernel: Initializing XFRM netlink socket
 >	Jun 06 15:42:22 mondas kernel: net enX0: Invalid extra type: 247
 >	Jun 06 15:42:22 mondas kernel: net enX0: Invalid extra type: 251
 >	Jun 06 15:42:22 mondas kernel: net enX0: Invalid extra type: 253
 >	Jun 06 15:42:22 mondas kernel: net enX0: Invalid extra type: 0
 >	Jun 06 15:42:22 mondas kernel: net enX0: Missing extra info
 >	Jun 06 15:44:36 mondas kernel: net enX0: Illegal number of responses 295
 
 
 As a data point, I don't see anything like that when running
 a debian 12 guest with a NetBSD-current XEN3_DOM0.
 
 root@debian:~# journalctl -b -1 | grep 'kernel.*net'
 Jun 07 04:15:51 debian kernel: audit: initializing netlink subsys (disabled)
 Jun 07 04:15:51 debian kernel: xen_netfront: Initialising Xen virtual ethernet driver
 
 The domain config is:
 
 name = "debian"
 type = "pvh"
 memory = 1024
 vcpus = 2
 vif = [ 'mac=xx:xx:xx:xx:xx:xx,bridge=bridge0' ]
 
 kernel = "/home/xen/debian/vmlinuz"
 ramdisk = "/home/xen/debian/initrd.img"
 extra = "root=/dev/xvda1p1 console=tty1 console=hvc0"
 
 disk = [
   'file:/home/xen/debian/disk.img,xvda1,w',
   'file:/home/xen/debian/debian-12.11.0-amd64-netinst.iso,xvdb,ro,devtype=cdrom'
 ]