Project

General

Profile

Actions

Todo #6587

closed

interfaces_gif_edit.php: Link flag changes need to catch up with FreeBSD

Added by Jim Pingle about 8 years ago. Updated about 8 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Interfaces
Target version:
Start date:
07/07/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -- it needs removed.

link1 is still "ECN Friendly" and is OK

link2 is new and is Outer Source Filtering:

A malicious party may try to circumvent security filters by using tun-
nelled packets. For better protection, gif performs both martian and
ingress filtering against the outer source address on egress. Note that
martian/ingress filters are in no way complete. You may want to secure
your node by using packet filters. Ingress filtering can break tunnel
operation in an asymmetrically routed network. It can be turned off by
IFF_LINK2 bit.

Actions #1

Updated by Jim Pingle about 8 years ago

  • Status changed from New to Feedback

Tested OK here. Leaving open for another run once it's in snapshots.

Actions #2

Updated by Chris Buechler about 8 years ago

  • Status changed from Feedback to Resolved

all good

Actions

Also available in: Atom PDF