CVSROOT: /cvs Module name: src Changes by: clau...@cvs.openbsd.org 2021/05/03 08:08:09
Modified files: usr.sbin/bgpd : session.c Log message: When negotiating multiprotocol capabilities only fall ack to AID_INET when no capability was sent to the peer (this happens if the multiprotocol capability got disabled). It is possible that local and remote systems end up with no shared AFI/SAFI pair. In this case the connection will not send or should not receive any UPDATE messages. The previous behaviour of falling back to AID_INET in that case can result in problematic behaviour when sessions are missconfigured. OK benno@, deraadt@