On Mon, Sep 18, 2017 at 05:38:57PM -0700, Tom Herbert wrote: > Allow IPv6 mobile subscriber packets. This entails adding an IPv6 mobile > subscriber address to pdp context and IPv6 specific variants to find pdp > contexts by address.
Please note that there are three different PDP contexts for IP: * IPv4 only (what gtp.c implements so far) * IPv6 only * dual IPv4+IPv6 (called IPv46) This information will have to be provisioned by the control plane via netlink for each PDP context. The kernel module then needs to make sure that on a v4-only context no IPv6 packets are accepted and vice-versa. Your proposed patch is missing this kind of screening function and I would imagine it could introduce all kinds of security problems :/ -- - Harald Welte <lafo...@gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)
