-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 22/01/12 22:32, Gert Doering wrote:
> Hi,
>
> the current "master" code on FreeBSD has two problems:
>
> - tun or tap devices are not removed at program end, so a "dead"
> interface is left behind - not critical, but we should not do that ->
> call "ifconfig destroy" in tun_close().
>
> - "topology subnet" for IPv4 causes failure for IPv6 (because the
> interface is ioctl()'ed to IFF_BROADCAST mode, which changes the IPv6
> behaviour to "use neighbour discovery", which would have to be
> implemented by the OpenVPN server - and isn't, as of today).
>
> With my change, the interface is left as "point to point" interface
> (which it really is), but routing and ifconfig is setup with the
> proper netmask, so all interesting packets are still sent down the tun
> if to OpenVPN.
>
> Patch below, auto-tested for tun and tap devices on FreeBSD 7.4 and
> FreeBSD 8.2 on amd64.
>
> (There's one catch for FreeBSD 8.2 if you use pf(4): it will block
> IPv6 fragments by default, so the standard t_client.sh test sets fail
> unless you specifically add "pass in on tun1 fragment" rules - but
> there's nothing OpenVPN can do about it. I'm just mentioning it here
> for the sake of the archives, in case someone else falls over it)
>
ACK, as I see you've done the real testing. Applied to master branch on
- -testing/-stable.
commit 62c613d46dc495d747074ca030d2cbdfd255c386
Author: Gert Doering <g...@fbsd74.ov.greenie.net>
List-Post: openvpn-devel@lists.sourceforge.net
Date: Sun Jan 22 23:21:22 2012 +0200
Platform cleanup for FreeBSD
Signed-off-by: Gert Doering <g...@greenie.muc.de>
URL: http://thread.gmane.org/gmane.network.openvpn.devel/5303
Acked-by: David Sommerseth <dav...@redhat.com>
Signed-off-by: David Sommerseth <dav...@redhat.com>
kind regards,
David Sommerseth
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk8dJGoACgkQDC186MBRfrqW/QCeIi1rXiF8s+xSKVXWxDECx9ZQ
3r8AmwQlA6kK2b+EBLMvN+m9eA/h/EPI
=cjd5
-----END PGP SIGNATURE-----
