HomeFreeBSD

if_ovpn: cope with loops

Description

if_ovpn: cope with loops

User misconfiguration may lead to routing loops where we try to send the tunnel
packet into the tunnel. This eventually leads to stack overflows and panics.

Avoid this using if_tunnel_check_nesting(), which will drop the packet if we're
looping or we hit three layers of nested tunnels.

MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")

Details

Provenance
kpAuthored on May 13 2024, 10:06 AM
Parents
rG421025a274fb: access.2: Mention that lstat(2) should be used for symbolic links
Branches
Unknown
Tags
Unknown