Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Michael Tuexen
On 06 Apr 2014, at 20:44, Bjoern A. Zeeb wrote: > > On 06 Apr 2014, at 16:42 , Michael Tuexen > wrote: > >> On 06 Apr 2014, at 17:05, Bjoern A. Zeeb >> wrote: >> >>> >>> On 06 Apr 2014, at 11:42 , Michael Tuexen >>> wrote: >>> On 05 Apr 2014, at 23:02, Bernd Walter wrote: >

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Michael Tuexen
On 06 Apr 2014, at 20:44, Bjoern A. Zeeb wrote: > > On 06 Apr 2014, at 17:04 , Michael Tuexen > wrote: > >>> Aehm, the SCTP code was filtering addresses at one point and made sure only >>> jail-visible addresses were seen or bound very much like normal PCB >>> handling. If this is not the

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Bjoern A. Zeeb
On 06 Apr 2014, at 16:42 , Michael Tuexen wrote: > On 06 Apr 2014, at 17:05, Bjoern A. Zeeb > wrote: > >> >> On 06 Apr 2014, at 11:42 , Michael Tuexen >> wrote: >> >>> On 05 Apr 2014, at 23:02, Bernd Walter wrote: >>> So far I've tested this on FreeBSD-9.2 BETA2 r254053M only. >>>

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Bjoern A. Zeeb
On 06 Apr 2014, at 17:04 , Michael Tuexen wrote: >> Aehm, the SCTP code was filtering addresses at one point and made sure only >> jail-visible addresses were seen or bound very much like normal PCB >> handling. If this is not the case (anymore) SCTP shall not be allowed >> inside jails aga

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Michael Tuexen
On 06 Apr 2014, at 17:05, Bjoern A. Zeeb wrote: > > On 06 Apr 2014, at 11:42 , Michael Tuexen > wrote: > >> On 05 Apr 2014, at 23:02, Bernd Walter wrote: >> >>> So far I've tested this on FreeBSD-9.2 BETA2 r254053M only. >>> The modifications are to allow IPv6 multicast support within jail

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Michael Tuexen
On 06 Apr 2014, at 17:05, Bjoern A. Zeeb wrote: > > On 06 Apr 2014, at 11:42 , Michael Tuexen > wrote: > >> On 05 Apr 2014, at 23:02, Bernd Walter wrote: >> >>> So far I've tested this on FreeBSD-9.2 BETA2 r254053M only. >>> The modifications are to allow IPv6 multicast support within jail

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Bjoern A. Zeeb
On 06 Apr 2014, at 11:42 , Michael Tuexen wrote: > On 05 Apr 2014, at 23:02, Bernd Walter wrote: > >> So far I've tested this on FreeBSD-9.2 BETA2 r254053M only. >> The modifications are to allow IPv6 multicast support within jail >> which only makes a difference for multicast addresses and s

Re: SCTP binds to IPs outside of jail

2014-04-06 Thread Michael Tuexen
On 05 Apr 2014, at 23:02, Bernd Walter wrote: > So far I've tested this on FreeBSD-9.2 BETA2 r254053M only. > The modifications are to allow IPv6 multicast support within jail > which only makes a difference for multicast addresses and some multicast > loopback checksum bugs - both changes are op

SCTP binds to IPs outside of jail

2014-04-05 Thread Bernd Walter
So far I've tested this on FreeBSD-9.2 BETA2 r254053M only. The modifications are to allow IPv6 multicast support within jail which only makes a difference for multicast addresses and some multicast loopback checksum bugs - both changes are open PR. I've created an AF_INET6 SCTP one to many socket