Index | Thread | Search

From:
Job Snijders <job@bsd.nl>
Subject:
Re: ipv4: don't forward packets from 0.0.0.0
To:
David Gwynne <david@gwynne.id.au>, tech@openbsd.org
Date:
Sat, 20 Jun 2026 13:34:32 +0000

Download raw body.

Thread
On Thu, Jun 18, 2026 at 09:15:54AM +0100, Stuart Henderson wrote:
> On 2026/06/18 16:52, David Gwynne wrote:
> > i don't think we should forward packets with certain source addresses,
> > and 0.0.0.0 in particular.
> 
> seems sane. RFC 6890 2.2.2 table 1 specifically says "forwardable: no".
> ip6_forward already has an equivalent IN6_IS_ADDR_UNSPECIFIED check.
> 
> > thoughts?
> 
> I think this is more correct than what we have now.

yeah