Bug #2627

IPv6 source address selection broken

Added by ftigeot 9 months ago. Updated 9 months ago.

Status:ResolvedStart date:01/29/2014
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:-
Target version:-

Description

Recent DragonFly 3.7 kernels use link-local addresses to talk to hosts on regular unicast prefixes.

This results in traffic beeing rejected by the remote host.

Example of bad behavior:
$ ping6 gw
PING6(56=40+8+8 bytes) fe80::be5f:f4ff:fe38:1bef --> 2001:7a8:3c67:2::254

Same example with a working kernel:
$ ping6 gw
PING6(56=40+8+8 bytes) 2001:7a8:3c67:2::12 --> 2001:7a8:3c67:2::254

Reverting commit cfd79120debdd52626136c5985f3a9e3d4fe42bf "jails/netinet6: Only select jailed ips for outgoing"
from January 25 is enough to fix the issue.

History

#1 Updated by profmakx 9 months ago

Just that it will break jail ipv6 again. I will have a look at it later this week.

#2 Updated by profmakx 9 months ago

this violates rfc6724. I am not sure why this happens because the patch should only have an impact when there's a jail involved.

#3 Updated by ftigeot 9 months ago

  • Status changed from New to Resolved

This issue now appears to be fixed

Also available in: Atom PDF