diff options
| author |   bluhm <bluhm@openbsd.org> | 2017-12-04 15:13:12 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2017-12-04 15:13:12 +0000 |
| commit | 441055dec26ba16cdd03b472cae28272b1a83141 (patch) | |
| tree | 36d5c507cbad23bc798fae2417cf654c58117b07 /lib/libc/include | |
| parent | change "if (lp &&" to "if lp != NULL &&". (diff) | |
| download | wireguard-openbsd-441055dec26ba16cdd03b472cae28272b1a83141.tar.xz wireguard-openbsd-441055dec26ba16cdd03b472cae28272b1a83141.zip | |
RFC 4861 requires that all neighbor discovery packets have 255 in
their IPv6 header hop limit field. Let pf drop neighbor solicitation,
neighbor advertisement, router solicitation, router advertisement,
and redirect ICMP6 packets that do not comply. This enforces that
bogus packets cannot be routed when pf is enabled.
OK mpi@ sashan@ benno@
Diffstat (limited to 'lib/libc/include')
0 files changed, 0 insertions, 0 deletions