Igalia / snabb

Snabb Switch: Fast open source packet processing
Apache License 2.0
48 stars 5 forks source link

Change port=0 ICMP handling to explicitly check for full port ranges instead #282

Open kbara opened 8 years ago

wingo commented 8 years ago

This is only for incoming echo requests and outgoing echo replies. Currently, incoming requests / outgoing replies are allowed to/from a B4 that controls port 0. That is a superset of all B4s that have full IPs. We should only allow ping to a B4 that has a full IP, because it's usually assumed that if you can ping an IPv4, that all ports on that IPv4 are on the same host.