[PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-26 Thread Hangbin Liu
Commit 6fd99094de2b ("ipv6: Don't reduce hop limit for an interface") disabled accept hop limit from RA if it is higher than the current hop limit for security stuff. But this behavior kind of break the RFC definition. RFC 4861, 6.3.4. Processing Received Router Advertisements If the received

Re: [PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-27 Thread YOSHIFUJI Hideaki/吉藤英明
Hi, Hangbin Liu wrote: > Commit 6fd99094de2b ("ipv6: Don't reduce hop limit for an interface") > disabled accept hop limit from RA if it is higher than the current hop > limit for security stuff. But this behavior kind of break the RFC definition. > > RFC 4861, 6.3.4. Processing Received Router

Re: [PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-27 Thread Hangbin Liu
2015-07-28 7:50 GMT+08:00 YOSHIFUJI Hideaki/吉藤英明 : > Hi, > > Hangbin Liu wrote: >> Commit 6fd99094de2b ("ipv6: Don't reduce hop limit for an interface") >> disabled accept hop limit from RA if it is higher than the current hop >> limit for security stuff. But this behavior kind of break the RFC def

Re: [PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-27 Thread YOSHIFUJI Hideaki
Hi, Hangbin Liu wrote: > 2015-07-28 7:50 GMT+08:00 YOSHIFUJI Hideaki/吉藤英明 > : >> Hi, >> >> Hangbin Liu wrote: >>> Commit 6fd99094de2b ("ipv6: Don't reduce hop limit for an interface") >>> disabled accept hop limit from RA if it is higher than the current hop >>> limit for security stuff. But this

Re: [PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-28 Thread Hangbin Liu
2015-07-28 11:58 GMT+08:00 YOSHIFUJI Hideaki : > Hi, > > Hangbin Liu wrote: >> 2015-07-28 7:50 GMT+08:00 YOSHIFUJI Hideaki/吉藤英明 >> : >>> Hi, >>> >>> Hangbin Liu wrote: Commit 6fd99094de2b ("ipv6: Don't reduce hop limit for an interface") disabled accept hop limit from RA if it is higher t

Re: [PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-28 Thread YOSHIFUJI Hideaki
Hangbin Liu wrote: > 2015-07-28 11:58 GMT+08:00 YOSHIFUJI Hideaki > : >> Hi, >> >> Hangbin Liu wrote: >>> 2015-07-28 7:50 GMT+08:00 YOSHIFUJI Hideaki/吉藤英明 >>> : Hi, Hangbin Liu wrote: > Commit 6fd99094de2b ("ipv6: Don't reduce hop limit for an interface") > disabled accept ho

Re: [PATCHv2] net/ipv6: add sysctl option accept_ra_hop_limit

2015-07-29 Thread Hangbin Liu
2015-07-29 10:14 GMT+08:00 YOSHIFUJI Hideaki : May be we use a “hop limit range" instead? How do you think? >>> >>> I think name of sysctl is the same as you suggested and change the >>> semantics. default value is 0 to accept all hotlimit value >>> as before and people can set it to 32 (for