Todo #6587
closed
interfaces_gif_edit.php: Link flag changes need to catch up with FreeBSD
0%
Description
link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -- it needs removed.
link1 is still "ECN Friendly" and is OK
link2 is new and is Outer Source Filtering:
A malicious party may try to circumvent security filters by using tun-
nelled packets. For better protection, gif performs both martian and
ingress filtering against the outer source address on egress. Note that
martian/ingress filters are in no way complete. You may want to secure
your node by using packet filters. Ingress filtering can break tunnel
operation in an asymmetrically routed network. It can be turned off by
IFF_LINK2 bit.
Updated by Jim Pingle almost 8 years ago
- Status changed from New to Feedback
Tested OK here. Leaving open for another run once it's in snapshots.
Updated by