]> git.ipfire.org Git - thirdparty/bird.git/commit
BFD: Improve incoming packet matching
authorOndrej Zajicek <santiago@crfreenet.org>
Sun, 22 Jan 2023 22:42:08 +0000 (23:42 +0100)
committerOndrej Zajicek <santiago@crfreenet.org>
Sun, 22 Jan 2023 22:42:08 +0000 (23:42 +0100)
commit99872676df45f1a490d3d63f43081afb41477040
tree15f2be0eb931a385a97e2168711e7e5053feaca9
parenta82683694da23799f247b3392a00efdd342afdfc
BFD: Improve incoming packet matching

For active sessions, ignore received packets with zero local id and
mismatched remote id. That forces a session timeout instead of an
immediate session restart. It makes BFD sessions more resilient to
packet spoofing.

Thanks to André Grüneberg for the suggestion.
proto/bfd/packets.c