Re: source routing honored by hosts?

[Andi Kleen <ak@xxxxxx>]

On Sat, Sep 01, 2001 at 01:14:11AM +0200, David Stevens wrote:
> ip6_forward() has the following two lines:
> 
>      if (ipv6_devconf.forwarding == 0 && opt->srcrt == 0)
>           goto error;
> 
> Aside from the other issue of per-interface forwarding :-), this appears to 
> allow
> forwarding of source-routed packets even when the node is a host, only. That
> seems to be a security hole to me. Suppose you have a multihomed host, or

Yes. Looks like one.

> 
>      if (ipv6_devconf.forwarding == 0)
>           goto error;

Definitely.


-Andi