Page MenuHomeFreeBSD

icmp6: rate limit our echo replies
ClosedPublic

Authored by glebius on Mar 22 2024, 9:49 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Oct 21, 2:21 AM
Unknown Object (File)
Fri, Oct 18, 10:24 PM
Unknown Object (File)
Fri, Oct 18, 10:24 PM
Unknown Object (File)
Fri, Oct 18, 8:14 PM
Unknown Object (File)
Wed, Oct 16, 10:53 PM
Unknown Object (File)
Wed, Oct 16, 10:29 PM
Unknown Object (File)
Oct 2 2024, 5:48 AM
Unknown Object (File)
Sep 27 2024, 9:44 PM

Details

Summary

The generation of ICMP6_ECHO_REPLY bypasses icmp6_error(), thus rate
limit was not applied.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision is now accepted and ready to land.Mar 23 2024, 2:21 PM
zlei added a subscriber: zlei.

Generally looks good to me.

sys/netinet6/icmp6.c
549

And do not forget to update statistic icp6s_toofreq if D44479 is abandoned.

This revision was automatically updated to reflect the committed changes.