Page MenuHomeFreeBSD

icmp6: rate limit our echo replies
ClosedPublic

Authored by glebius on Mar 22 2024, 9:49 PM.
Tags
None
Referenced Files
F108441741: D44480.id136109.diff
Fri, Jan 24, 7:26 PM
Unknown Object (File)
Fri, Jan 10, 6:51 AM
Unknown Object (File)
Fri, Jan 10, 1:11 AM
Unknown Object (File)
Nov 25 2024, 9:14 PM
Unknown Object (File)
Nov 18 2024, 8:56 AM
Unknown Object (File)
Nov 11 2024, 2:24 AM
Unknown Object (File)
Oct 21 2024, 2:21 AM
Unknown Object (File)
Oct 18 2024, 10:24 PM

Details

Summary

The generation of ICMP6_ECHO_REPLY bypasses icmp6_error(), thus rate
limit was not applied.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 56751
Build 53639: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Mar 23 2024, 2:21 PM
zlei added a subscriber: zlei.

Generally looks good to me.

sys/netinet6/icmp6.c
549

And do not forget to update statistic icp6s_toofreq if D44479 is abandoned.

This revision was automatically updated to reflect the committed changes.