summaryrefslogtreecommitdiffstats
path: root/sys/netinet
diff options
context:
space:
mode:
authormaxim <maxim@FreeBSD.org>2004-09-24 12:18:40 +0000
committermaxim <maxim@FreeBSD.org>2004-09-24 12:18:40 +0000
commit72a6bed3762e14d8aaf50ac8e3bd026fd146455e (patch)
tree206b828c58e69278851cad80ee4c8885bd9b0abf /sys/netinet
parent909ffdebbff0fa664f584f1bcbbe79be17415824 (diff)
downloadFreeBSD-src-72a6bed3762e14d8aaf50ac8e3bd026fd146455e.zip
FreeBSD-src-72a6bed3762e14d8aaf50ac8e3bd026fd146455e.tar.gz
o Turn net.inet.ip.check_interface sysctl off by default.
When net.inet.ip.check_interface was MFCed to RELENG_4 3+ years ago in rev. 1.130.2.17 ip_input.c it was 1 by default but shortly changed to 0 (accidently?) in rev. 1.130.2.20 in RELENG_4 only. Among with the fact this knob is not documented it breaks POLA especially in bridge environment. OK'ed by: andre Reviewed by: -current
Diffstat (limited to 'sys/netinet')
-rw-r--r--sys/netinet/ip_input.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c
index 1bc4002..223866f 100644
--- a/sys/netinet/ip_input.c
+++ b/sys/netinet/ip_input.c
@@ -148,7 +148,7 @@ SYSCTL_INT(_net_inet_ip, OID_AUTO, random_id, CTLFLAG_RW,
* to the loopback interface instead of the interface where the
* packets for those addresses are received.
*/
-static int ip_checkinterface = 1;
+static int ip_checkinterface = 0;
SYSCTL_INT(_net_inet_ip, OID_AUTO, check_interface, CTLFLAG_RW,
&ip_checkinterface, 0, "Verify packet arrives on correct interface");
OpenPOWER on IntegriCloud