Bug 30792 - traffic destined for 127/8 addresses should be kept off the network
Summary: traffic destined for 127/8 addresses should be kept off the network
Status: Closed FIXED
Alias: None
Product: Base System
Classification: Unclassified
Component: misc (show other bugs)
Version: 4.4-RELEASE
Hardware: Any Any
: Normal Affects Only Me
Assignee: ru
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2001-09-24 18:00 UTC by Joe Abley
Modified: 2002-02-01 10:43 UTC (History)
1 user (show)

See Also:


Attachments
file.diff (380 bytes, patch)
2001-09-24 18:00 UTC, Joe Abley
no flags Details | Diff
loopback.patch (1.18 KB, patch)
2001-09-24 19:40 UTC, scot
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Joe Abley 2001-09-24 18:00:01 UTC
IP traffic with destionation addresses that (a) fall within 127/8
and (b) do not match any configured local addresses or aliases will
be sent out on the network following the default route, if there is one.

This is contrary to the specifications in RFC1122, which states that
"addresses of this form MUST NOT appear outside the host".

How-To-Repeat:   tcpdump

whilst

  ping 127.1.1.1

in an environment where a default exists pointing out the same interface
watched by default by tcpdump, and where 127.1.1.1 does not match any
locally-configured address or alias. The tcpdump will reveal traffic
sent out on the net with destination addresses within 127/8.
Comment 1 scot 2001-09-24 19:40:27 UTC
Another alternative to patching rc.network, is to define static_routes and
add route_loopback to etc/defaults/rc.conf (see attached patch).

We may also need do this for IPv6's loopback network.

Scot

Comment 2 Joe Abley 2001-09-24 19:43:51 UTC
On Mon, Sep 24, 2001 at 01:40:27PM -0500, Scot W. Hetzel wrote:
> Another alternative to patching rc.network, is to define static_routes and
> add route_loopback to etc/defaults/rc.conf (see attached patch).
> 
> We may also need do this for IPv6's loopback network.

That's a nicer idea than my patch.


Joe
Comment 3 ru freebsd_committer freebsd_triage 2002-01-21 14:01:35 UTC
State Changed
From-To: open->feedback

Fixed in 5.0-CURRENT, sys/netinet/ip_output,v 1.148. 
(Packets with source address of 127/8 are not eligible as well.) 

MFC in one week. 


Comment 4 ru freebsd_committer freebsd_triage 2002-01-21 14:01:35 UTC
Responsible Changed
From-To: freebsd-bugs->ru
Comment 5 ru freebsd_committer freebsd_triage 2002-02-01 10:42:04 UTC
State Changed
From-To: feedback->closed

Fixed in 4.5-STABLE, sys/netinet/ip_output.c,v 1.99.2.25.