Re: ospfd filtering

2013-06-02 Thread Loïc BLOT
Hi Sorry for the double, but i have forgotten the kroute.c in my diff, then i cannot work :) Have a nice day --- old/usr.sbin/ospfd/kroute.c 2011-11-15 05:17:46.0 +0100 +++ OpenBSD/usr.sbin/ospfd/kroute.c 2013-05-31 22:37:59.434032287 +0200 @@ -1,6 +1,7 @@ -/* $OpenBSD: kroute.c,v

Re: ospfd filtering

2013-05-31 Thread Loïc BLOT
Hi misc, i have wrote some C code to resolve my OSPF+BGP default route problem, and now the problem is resolved by the following ospfd patch. I have added the kroute-ignore-insert option to ospfd. This options block kernel route insertion with a prefix, prefixlen and nexthop option Example: krout

Re: ospfd filtering

2013-05-10 Thread Loïc BLOT
Perfect Claudio, if you need some tests, tell me. I will need this fix before middle june, then i can help you. I cannot get /1 from MAN routers, sorry, then i'm blocked with one router for now (and i hope the default route wouldn't be sent to the GRE tunnel :p). If you want i would help you to im

Re: ospfd filtering

2013-05-09 Thread Claudio Jeker
On Wed, May 01, 2013 at 11:45:04PM +0200, Loïc BLOT wrote: > My border routers obtain a default route in fact, and OSPF must > redistribute this route to LAN Routers. Here is a scheme > > > |-- R1 site 1 R3 Site 1 > | BGP AS 650XX | OSPF a3| > |---

Re: ospfd filtering

2013-05-01 Thread Loïc BLOT
My border routers obtain a default route in fact, and OSPF must redistribute this route to LAN Routers. Here is a scheme |-- R1 site 1 R3 Site 1 | BGP AS 650XX | OSPF a3| |-- R2 site 1 R4 Site 1 |

Re: ospfd filtering

2013-05-01 Thread Claudio Jeker
On Wed, May 01, 2013 at 10:00:55PM +0200, Loïc BLOT wrote: > In fact, this isn't really an interarea problem but a inter protocol > problem. > > Next month i'll have two border routers which are connecter to MAN by > BGP. In my LAN and on my tunnels i'm in a "LAN backbone" area. > > Because of th

Re: ospfd filtering

2013-05-01 Thread Loïc BLOT
In fact, this isn't really an interarea problem but a inter protocol problem. Next month i'll have two border routers which are connecter to MAN by BGP. In my LAN and on my tunnels i'm in a "LAN backbone" area. Because of the priority of OSPF and the default route redistribution, the default rout

Re: ospfd filtering

2013-05-01 Thread Claudio Jeker
On Wed, May 01, 2013 at 08:56:32PM +0300, Dan Shechter wrote: > You can't filter OSPF routes inside an area. It will break the OSPF > shortest path tree. > > I don't know about ospfd, but on Cisco IOS you can filter routes > (LSAs) between areas and you can also prevent prefixes from being > inser

Re: ospfd filtering

2013-05-01 Thread Dan Shechter
You can't filter OSPF routes inside an area. It will break the OSPF shortest path tree. I don't know about ospfd, but on Cisco IOS you can filter routes (LSAs) between areas and you can also prevent prefixes from being inserted to the routing table of the router where the filtering commands are en

Re: ospfd filtering

2013-05-01 Thread Loïc BLOT
OK for the tree, but refuse to insert routes in the kernel is useful. It would be a great function to refuse inserting kernel routes from some routers. -- Best regards, Loïc BLOT, UNIX systems, security and network expert http://www.unix-experience.fr Le mercredi 01 mai 2013 à 20:56 +0300, Da

ospfd filtering

2013-05-01 Thread Loïc BLOT
Hello all, to begin, thanks to OpenBSD team & contributors for this very good release. I have a question about ospfd. Why ospfd doesn't have capabitilities to filter some routes, or filter by sources ? (ok by source can be filtered by PF, but if i want to refuse routes from specific hosts, or some

ospfd filtering

2013-05-01 Thread Loïc BLOT
Hello all, to begin, thanks to OpenBSD team & contributors for this very good release. I have a question about ospfd. Why ospfd doesn't have capabitilities to filter some routes, or filter by sources ? (ok by source can be filtered by PF, but if i want to refuse routes from specific hosts, or some

Re: Ospfd filtering

2013-02-11 Thread Stuart Henderson
On 2013-02-11, Pawel wrote: > Hello all, > > I would like to ask, if it's possible to filter incoming and outgoing > announcements from neighbors in the same area (in the same way as in bgpd)? > If it isn't implemented, maybe somebody knows, if it will be possible in > future releases ospfd? > I'm

Ospfd filtering

2013-02-11 Thread Pawel
Hello all, I would like to ask, if it's possible to filter incoming and outgoing announcements from neighbors in the same area (in the same way as in bgpd)? If it isn't implemented, maybe somebody knows, if it will be possible in future releases ospfd? I'm using ospfd from OpenBSD 5.1.