Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

firewall should allow gluon-announced to work on br-wan #162

Closed
tcatm opened this issue Aug 13, 2014 · 4 comments
Closed

firewall should allow gluon-announced to work on br-wan #162

tcatm opened this issue Aug 13, 2014 · 4 comments
Labels
0. type: enhancement The changeset is an enhancement
Milestone
2015.1

Comments

@tcatm
Copy link

tcatm commented Aug 13, 2014

No description provided.

@neocturne
Copy link
Member

Rationale?

@neocturne neocturne added this to the 2015.1 milestone Apr 27, 2015
@neocturne neocturne added the 0. type: enhancement The changeset is an enhancement label Apr 27, 2015
@neocturne
Copy link
Member

This should be okay as long as only link-local source addresses are allowed. Otherwise, this would allow similar amplification attacks as we had with DNS before.

@neocturne
Copy link
Member

Ah, only allowing ff02::2:1001 as the destination and no unicast address of the node would have the same effect of only allowing requests from peers on the same link.

@neocturne
Copy link
Member

Done.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
0. type: enhancement The changeset is an enhancement
Projects
None yet
Milestone
2015.1
Development

No branches or pull requests
2 participants
@tcatm @neocturne