mirror of
https://github.com/opnsense/src.git
synced 2026-04-21 22:27:47 -04:00
In IPv4 fast forwarding path, send ICMP unreachable messages for
routes which have RTF_REJECT set *and* a zero expiry timer. PR: kern/109246 MFC after: 10 days Submitted by: Ingo Flaschberger
This commit is contained in:
parent
4ff78a9ca8
commit
27f8eaaf03
1 changed files with 2 additions and 1 deletions
|
|
@ -500,7 +500,8 @@ passout:
|
|||
* Check if route is dampned (when ARP is unable to resolve)
|
||||
*/
|
||||
if ((ro.ro_rt->rt_flags & RTF_REJECT) &&
|
||||
ro.ro_rt->rt_rmx.rmx_expire >= time_uptime) {
|
||||
(ro.ro_rt->rt_rmx.rmx_expire == 0 ||
|
||||
time_uptime < ro.ro_rt->rt_rmx.rmx_expire)) {
|
||||
icmp_error(m, ICMP_UNREACH, ICMP_UNREACH_HOST, 0, 0);
|
||||
goto consumed;
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in a new issue