Project

General

Profile

Actions

Todo #6587

closed

interfaces_gif_edit.php: Link flag changes need to catch up with FreeBSD

Added by Jim Pingle over 7 years ago. Updated over 7 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Interfaces
Target version:
Start date:
07/07/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -- it needs removed.

link1 is still "ECN Friendly" and is OK

link2 is new and is Outer Source Filtering:

A malicious party may try to circumvent security filters by using tun-
nelled packets. For better protection, gif performs both martian and
ingress filtering against the outer source address on egress. Note that
martian/ingress filters are in no way complete. You may want to secure
your node by using packet filters. Ingress filtering can break tunnel
operation in an asymmetrically routed network. It can be turned off by
IFF_LINK2 bit.

Actions

Also available in: Atom PDF