• Flavio Leitner's avatar
    route: fix ICMP redirect validation · 7cc9150e
    Flavio Leitner authored
    The commit f39925db
    (ipv4: Cache learned redirect information in inetpeer.)
    removed some ICMP packet validations which are required by
    RFC 1122, section 3.2.2.2:
    ...
      A Redirect message SHOULD be silently discarded if the new
      gateway address it specifies is not on the same connected
      (sub-) net through which the Redirect arrived [INTRO:2,
      Appendix A], or if the source of the Redirect is not the
      current first-hop gateway for the specified destination (see
      Section 3.3.1).
    Signed-off-by: default avatarFlavio Leitner <fbl@redhat.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    7cc9150e
route.c 82.7 KB