diff options
| author |   florian <florian@openbsd.org> | 2014-08-27 14:04:15 +0000 |
|---|---|---|
| committer | florian <florian@openbsd.org> | 2014-08-27 14:04:15 +0000 |
| commit | fb92997af583062f7ef32e82ec027bbca496201e (patch) | |
| tree | 2ff117e08bfb0432c0ee276895bfe5da037936d8 /sys/netinet6/icmp6.c | |
| parent | Add httpd default log files to the rotation. (diff) | |
| download | wireguard-openbsd-fb92997af583062f7ef32e82ec027bbca496201e.tar.xz wireguard-openbsd-fb92997af583062f7ef32e82ec027bbca496201e.zip | |
Nuke net.inet6.icmp6.rediraccept and allow redirects on interfaces
with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@
Diffstat (limited to 'sys/netinet6/icmp6.c')
| -rw-r--r-- | sys/netinet6/icmp6.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet6/icmp6.c b/sys/netinet6/icmp6.c index 07b9a7beec7..c43857759d6 100644 --- a/sys/netinet6/icmp6.c +++ b/sys/netinet6/icmp6.c @@ -1,4 +1,4 @@ -/* $OpenBSD: icmp6.c,v 1.147 2014/07/22 11:06:10 mpi Exp $ */ +/* $OpenBSD: icmp6.c,v 1.148 2014/08/27 14:04:16 florian Exp $ */ /* $KAME: icmp6.c,v 1.217 2001/06/20 15:03:29 jinmei Exp $ */ /* @@ -1386,7 +1386,7 @@ icmp6_redirect_input(struct mbuf *m, int off) /* XXX if we are router, we don't update route by icmp6 redirect */ if (ip6_forwarding) goto freeit; - if (!icmp6_rediraccept) + if (!(ifp->if_xflags & IFXF_AUTOCONF6)) goto freeit; IP6_EXTHDR_GET(nd_rd, struct nd_redirect *, m, off, icmp6len); |