LOR in route.c // scope6.c

2011-08-18 Thread Garrett Cooper
Hi, I've periodically seen the following LOR when trying to repro a panic after restarting my network configuration: :lock order reversal: 1st 0xc4142f1c rtentry (rtentry) @ /usr/src/sys/net/routec:362 2nd 0xc3d08604 if_afdata (if_afdata) @ /usr/src/sys/netinet6/scope6.c:417 KDB: stack backt

IP_MINTTL and RFC5082 (TTL security, GTSM) support

2011-08-18 Thread Alexander V. Chernikov
Hello list! FreeBSD supports IP_MINTTL since long ago (5.x ?). This is RFC3682-compatible implementation. It is very simple: if we can associate incoming packet with any socket, socket is checked for minimum TTL value existence. If such value exists and received packet TTL is lower, packet i