]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Drop incoming fe80:: packets silently now.
authorGert Doering <gert@greenie.muc.de>
Fri, 6 Jun 2014 18:43:55 +0000 (20:43 +0200)
committerGert Doering <gert@greenie.muc.de>
Sun, 8 Jun 2014 10:57:31 +0000 (12:57 +0200)
commit45f5a0a87870809ee453695ff0167b3754f0431e
treeac9f9d14782a5dcc55cb94dc7ca47550e4580a5c
parentc570c1923c4b81871a115f0c07bb2aa04e85fd69
Drop incoming fe80:: packets silently now.

IPv6 has the concept of "link local" addresses, fe80::<host id>, which
normally are present on every link, and are used for stuff like DHCPv6,
neighbor discovery, etc.

OpenVPN point-to-multipoint mode currently does neither configure them on
tun interfaces, nor are they handled in a meaningful way if a client OS
always has them (like Windows or Solaris) - so the log fills with many
lines of "MULTI: bad source address from client [fe80::...]", serving
no useful purpose.

This patch just recognizes IPv6 LL packets and silently drops them.

Further patches can build on this and add full link-local support, which
would require address learning (as the addresse are based on host IDs, not
assigned by the server).

Signed-off-by: Gert Doering <gert@greenie.muc.de>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <1402080235-24409-1-git-send-email-gert@greenie.muc.de>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8773
(cherry picked from commit 70f1864188ad00451683cabf51e56b7730250c40)
src/openvpn/multi.c