Actions
Todo #6587
closed
interfaces_gif_edit.php: Link flag changes need to catch up with FreeBSD
Start date:
07/07/2016
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Release Notes:
Description
link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -- it needs removed.
link1 is still "ECN Friendly" and is OK
link2 is new and is Outer Source Filtering:
A malicious party may try to circumvent security filters by using tun-
nelled packets. For better protection, gif performs both martian and
ingress filtering against the outer source address on egress. Note that
martian/ingress filters are in no way complete. You may want to secure
your node by using packet filters. Ingress filtering can break tunnel
operation in an asymmetrically routed network. It can be turned off by
IFF_LINK2 bit.
Updated by 
Updated by
Actions