123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463 |
- <html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Send-to-self Patch</title><meta name="generator" content="DocBook XSL Stylesheets V1.76.1"><meta name="keywords" content="Intellon, Atheros, Qualcomm, HomePlug, powerline, communications, INT6000, INT6300, INT6400, AR7400, AR7420"><link rel="home" href="index.html" title="Qualcomm Atheros Open Powerline Toolkit"><link rel="up" href="ch02.html" title="Chapter 2. Hardware"><link rel="prev" href="ch02s05.html" title="Powerline Workstations"><link rel="next" href="ch03.html" title="Chapter 3. Software"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">
- Send-to-self Patch
- </th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ch02s05.html">Prev</a> </td><th width="60%" align="center">Chapter 2.
- Hardware
- </th><td width="20%" align="right"> <a accesskey="n" href="ch03.html">Next</a></td></tr></table><hr></div><div class="section" title="Send-to-self Patch"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="hardware-send-to-self"></a>
- Send-to-self Patch
- </h2></div></div></div><p>
- One advantage of <span class="productname">Linux</span>™ powerline workstations is the ability to control the low-level networking environment. ISO Layer 2 traffic can be easily directed from one Ethernet interface to another on the same host but Layer 3 traffic is a different matter because routing software merely routes this type of traffic internally.
- </p><p>
- A <span class="productname">Linux</span>™ kernel <a class="ulink" href="http://www.ssi.bg/~ja/#loop" target="_top">patch</a> is available that will allow ISO Layer 3 traffic to be routed from one Ethernet interface to another on the same host. With this patch, multiple instances of a traffic generator, like <span class="application">ttcp</span> or <span class="application">iperf</span>, can be effectively deployed on the same host without modification.
- </p><p>
- This patch is useful for testing on a closed network but it could pose a security risk to the local host when connected to a public network. Kernels having this patch installed should have a special designation such as <span class="quote">“<span class="quote">linux-2.6.28-send-to-self</span>”</span> so that users are aware that the patch is installed.
- </p><div class="example"><a name="idp20601280"></a><p class="title"><b>Example 2.1.
- <span class="quote">“<span class="quote">send-to-self</span>”</span> Patch Description
- </b></p><div class="example-contents"><p>
- The following is the full, original patch description.
- </p><pre class="programlisting">
- Send-To-Self interface flag
- Julian Anastasov <ja@ssi.bg>, July 2003
- Patches for different kernels:
- send-to-self-2.4.21-1.diff
- send-to-self-2.5.73-1.diff
- The presented patch implements routing of traffic between local
- IP addresses externally via ethernet interfaces. This patch is basically
- the Ben Greear's send-to-self work but reimplemented entirely on routing
- level. The idea is to return output route via external interfaces if
- path between two local IP addresses is requested and they are configured
- on different interfaces with /proc/sys/net/ipv4/conf/DEVNAME/loop set to
- 1. As result, arp_filter (if enabled - the recommended value)
- automatically accepts the ARP requests on the right interface. The
- rp_filter check is modified to accept traffic from such interfaces with
- local IP as sender, so using loop=1 for interfaces attached to insecure
- mediums is not recommended.
- Pros:
- - it can be used from all existing applications without change
- - it is not limited to 2 interfaces
- - you can use it with many IP addresses
- - does not depend on the rp_filter and arp_filter states, they
- can be set to 1
- - the packets are not altered in any way, useful for QoS testings
- - the routing result is cached, the routing checks are not per packet
- Cons:
- - not possible to use it for interfaces attached to insecure
- mediums (the rp_filter protection allows saddr to be local IP).
- By design. Use at your own risk.
- The usage is simple:
- # Connect two or more interfaces to same hub or via crossover cable
- # Enable loopback mode for eth0 and eth1. This even can be
- # default mode without breaking any other talks. By this way
- # we allow external routing only between local IPs configured
- # on the specified interfaces.
- echo 1 > /proc/sys/net/ipv4/conf/eth0/loop
- echo 1 > /proc/sys/net/ipv4/conf/eth1/loop
- # Add some IP addresses for testing, eg. client and server IP
- ip address add 192.168.1.1 dev eth0
- ip address add 192.168.2.1 dev eth1
- # Testing with applications that are aware of this binding.
- # The main thing the apps need to know is what src and dst IP
- # addresses to use. The client app needs to bind to the src IP
- # and by this way to request output route to the dst IP. There
- # is no specific configuration for the server app listening on
- # 192.168.2.1
- ping -I 192.168.1.1 192.168.2.1
- # Note that specifying the output device (SO_BINDTODEVICE is
- # not recommended)
- # Testing with applications that are not aware of this feature:
- # for 192.168.1.1 client (the same for the server is not needed).
- # Note that by default, in local routes the kernel uses the local
- # IPs as preferred source. This is the safe default mode (if loop=1)
- # for applications that do not care what src IP will be used
- # for their talks with local IPs. We try to change that and to
- # use IPs from different interfaces.
- ip route replace local 192.168.2.1 dev eth1 scope host src 192.168.1.1 proto kernel
- # but for any case, here it is and for the "server":
- ip route replace local 192.168.1.1 dev eth0 scope host src 192.168.2.1 proto kernel
- # Testing it:
- ping 192.168.2.1
- ping -I 192.168.1.1 192.168.2.1
- telnet 192.168.2.1
- # Note that by replacing the local route's preferred source IP address
- # we help the IP address autoselection to select proper IP to the
- # target, in our case, route via eth
- </pre></div></div><br class="example-break"><div class="example"><a name="idp20602424"></a><p class="title"><b>Example 2.2.
- <span class="quote">“<span class="quote">send-to-self</span>”</span> Patch Application
- </b></p><div class="example-contents"><p>
- The following example illustrates how to use <span class="application">iperf</span> to perform <acronym class="acronym">TCP</acronym> and <acronym class="acronym">UDP</acronym> traffic measurements once this patch is installed. We illustrate the use of <span class="application">iperf</span> but do not necessarily endorse it for traffic measurement. We also illustrate the use of two interfaces but the <span class="quote">“<span class="quote">send-to-self</span>”</span> patch will support additional interfaces. We also illustrate the use of environment variables so that procedures can execute on different hosts without modification but these environment variables are not required.
- </p><p>
- First, we define environment variables, <code class="varname">IF1</code> and <code class="varname">IF2</code>, for each Ethernet interface and, <code class="varname">IP1</code> and <code class="varname">IP2</code>, for their IP addresses. Each interface must be on a separate IP subnet. We export definitions here so that they are accessible to this process and any subprocesses, such as shell scripts. Do whatever is appropriate for your environment.
- </p><pre class="screen">
- export IF1=eth1
- export IF2=eth2
- export IP1=192.168.1.1
- export IP2=192.168.2.2
- </pre><p>
- Next, we assign the IP addresses to the interfaces using program <span class="application">ifconfig</span>. There are other ways to do this. Observe that we reference our environment variables on the command line.
- </p><pre class="screen">
- ifconfig ${IF1} ${IP1}
- ifconfig ${IF2} ${IP2}
- </pre><p>
- Next, we suppress internal routing between local interfaces. The <code class="varname">loop</code> propery only exists on kernels that have the <span class="quote">“<span class="quote">send-to-self</span>”</span> patch installed and have the <code class="filename">/proc</code> filesystem mounted. Some systems may not mount this file system.
- </p><pre class="screen">
- echo 1 > /proc/sys/net/ipv4/conf/${IF1}/loop
- echo 1 > /proc/sys/net/ipv4/conf/${IF2}/loop
- </pre><p>
- Alternately, you could edit file <code class="filename">/etc/sysctl.conf</code>, as follows, to set the <code class="varname">loop</code> property for each interface during system startup. Again, the <code class="varname">loop</code> propery only exists on kernels that have the <span class="quote">“<span class="quote">send-to-self</span>”</span> patch installed and so errors will occur if you boot another kernel that does not have it installed.
- </p><pre class="programlisting">
- net.ipv4.conf.eth1.loop = 1
- net.ipv4.conf.eth2.loop = 1
- </pre><p>
- Open a console window and start <span class="application">iperf</span> as a server. Option <strong class="userinput"><code>-s</code></strong> identifies this instance of <span class="application">iperf</span> as the server. Option <strong class="userinput"><code>-B</code></strong> binds this instance to one host interface by IP address, in this case <code class="varname">IP1</code> defined earlier.
- </p><pre class="screen">
- iperf -B ${IP1} -s
- ------------------------------------------------------------
- Server listening on TCP port 5001
- Binding to local address 192.168.1.1
- TCP window size: 85.3 KByte (default)
- ------------------------------------------------------------
- </pre><p>
- Open a second console window and start <span class="application">iperf</span> as a client. Option <strong class="userinput"><code>-c</code></strong> identifies this instance of <span class="application">iperf</span> as a client. Option <strong class="userinput"><code>-B</code></strong> binds this instance to the one interface by IP address, in this case <code class="varname">IP2</code> defined earlier. The server address must also be specified, in this case <code class="varname">IP1</code> bound to the server in the last step.
- </p><pre class="screen">
- iperf -B ${IP2} -c ${IP1}
- ------------------------------------------------------------
- Client connecting to 192.168.1.1, TCP port 5001
- Binding to local address 192.168.2.1
- TCP window size: 16.0 KByte (default)
- ------------------------------------------------------------
- [ 3] local 192.168.2.1 port 5001 connected with 192.168.1.1 port 5001
- [ ID] Interval Transfer Bandwidth
- [ 3] 0.0-10.0 sec 31.1 MBytes 26.0 Mbits/sec
- </pre></div></div><br class="example-break"><div class="example"><a name="idp20620152"></a><p class="title"><b>Example 2.3.
- <span class="quote">“<span class="quote">send-to-self</span>”</span> Patch Installation
- </b></p><div class="example-contents"><p>
- The <span class="quote">“<span class="quote">send-to-self</span>”</span> patch exists for several recent <span class="productname">Linux</span>™ kernel versions but not all versions. Assuming you have obtained the correct kernel archive and the correct patch version, the following script illustrates the steps needed to apply the patch on <span class="productname">Ubuntu 9.04</span>™ and recompile the kernel. Observe that, in this case, the patch version does not match the kernel version because a patch has not been published for that kernel version.
- </p><p>
- The following script can be used on a Ubuntu Linux distribution to download kernel source, the send-to-self patch, apply the patch then compile and install the resulting kernal image. When the <span class="application">menuconfig</span> screen appears:
- </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>
- Select <strong class="userinput"><code>General Setup</code></strong> on the <span class="quote">“<span class="quote">Linux Kernel Configuration</span>”</span> screen.
- </p></li><li class="listitem"><p>
- Select <strong class="userinput"><code>Local version - append to kernel release</code></strong> on the <span class="quote">“<span class="quote">General Setup</span>”</span> screen.
- </p></li><li class="listitem"><p>
- Enter the version suffix <span class="quote">“<span class="quote">-send-to-self</span>”</span>.
- </p></li><li class="listitem"><p>
- Select <strong class="userinput"><code>ok</code></strong> to return to the <span class="quote">“<span class="quote">General Setup</span>”</span> screen.
- </p></li><li class="listitem"><p>
- Select <strong class="userinput"><code>Automatically append version information to the version string</code></strong> on the <span class="quote">“<span class="quote">General Setup</span>”</span> screen.
- </p></li><li class="listitem"><p>
- Select <strong class="userinput"><code>exit</code></strong> to return to the <span class="quote">“<span class="quote">Linux Kernel Configuration</span>”</span> screen.
- </p></li><li class="listitem"><p>
- Select <strong class="userinput"><code>exit</code></strong> to close the <span class="application">menuconfig</span> program.
- </p></li><li class="listitem"><p>
- Select <strong class="userinput"><code>yes</code></strong> if prompted to save your new kernel configuration. This message does not appear each time.
- </p></li></ol></div><pre class="programlisting">
- #!/bin/bash
- # file: patches/send-to-self-2.6.28.sh
- # ====================================================================
- # environment variables;
- # --------------------------------------------------------------------
- VERSION=2.6.28
- CURRENT=9
- VARIANT=send-to-self
- PACKAGE=linux-source-${VERSION}
- ARCHIVE=${PACKAGE}.tar.bz2
- PATCH=send-to-self-2.6.26-1.diff
- # ====================================================================
- # extend version string;
- # --------------------------------------------------------------------
- if [ ! -z ${CURRENT} ]; then
- VERSION+=.${CURRENT}
- fi
- if [ ! -z ${VARIANT} ]; then
- VERSION+=-${VARIANT}
- fi
- # ====================================================================
- # install required software;
- # --------------------------------------------------------------------
- if [ ! -f ${ARCHIVE} ]; then
- wget http://www.ssi.bg/~ja/${PATCH}
- apt-get install ${PACKAGE}
- # apt-get install ${PACKAGE} --reinstall
- apt-get install binutils patch gcc g++
- apt-get install ncurses-dev
- mv /usr/src/${ARCHIVE} .
- fi
- # ====================================================================
- # confirm archive file exists;
- # --------------------------------------------------------------------
- if [ ! -f ${ARCHIVE} ]; then
- echo "File ${ARCHIVE} is missing or misplaced"
- exit 1
- fi
- # ====================================================================
- # confirm patch file exists;
- # --------------------------------------------------------------------
- if [ ! -f ${PATCH} ]; then
- echo "File ${PATCH} is missing or misplaced"
- exit 1
- fi
- # ====================================================================
- # remove old kernel source if present;
- # --------------------------------------------------------------------
- if [ -d ${PACKAGE} ]; then
- echo "Removing old source ..."
- rm -fr ${PACKAGE}
- fi
- # ====================================================================
- # extract kernel source;
- # --------------------------------------------------------------------
- tar -vjxf ${ARCHIVE}
- if [ ! -d ${PACKAGE} ]; then
- echo "Folder ${PACKAGE} does not exist"
- exit 1
- fi
- cd ${PACKAGE}
- # ====================================================================
- # patch kernel source;
- # --------------------------------------------------------------------
- patch -p1 < ../${PATCH}
- # ====================================================================
- # compile kernel source;
- # --------------------------------------------------------------------
- make mrproper
- make menuconfig
- make
- # ====================================================================
- # install kernel source;
- # --------------------------------------------------------------------
- make modules_install
- make install
- # ====================================================================
- # install kernel source;
- # --------------------------------------------------------------------
- mkinitramfs -o /boot/initrd.img-${VERSION} ${VERSION}
- ln -fs config-${VERSION} /boot/config
- ln -fs initrd.img-${VERSION} /boot/initrd.img
- ln -fs System.map-${VERSION} /boot/System.map
- ln -fs vmlinuz-${VERSION} /boot/vmlinuz
- </pre></div></div><br class="example-break"><div class="note" title="In case you don't know ..." style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">
- In case you don't know ...
- </h3><p>
- apt-get --reinstall
- </p><p>
- The <span class="application">apt-get</span> program is only available on Debian-based distributions. If you do not use a Debian-based system then you must find another way to obtain the necessary packages. Option <strong class="userinput"><code>--reinstall</code></strong> instructs <span class="application">apt-get</span> to download the kernel even though it has been installed before. It is not needed on the first script execution but may be needed on subsequent script executions if you have deleted the kernel archive file.
- </p><p>
- mkinitramfs
- </p><p>
- This script uses <span class="application">mkinitramfs</span> instead of the <span class="application">mkinitrd</span>. This may differ on other distributions. The kernel source package used here has <span class="productname">Ubuntu</span>™ modifications that result in a minor version being appended to the kernel version. This may not happen with other distributions or with kernels obtained directly from kernel.org.
- </p><p>
- cut-and-paste
- </p><p>
- This script, or some like it, are included in the <code class="filename">./patches</code> folder of the toolkit. You can also copy and paste this script but remember to edit the environment variables at the top, remove all carriage returns and set correct file permissions with <strong class="userinput"><code>chmod 0755</code></strong> before executing it on your <span class="productname">Linux</span>™ host. Run the script as <code class="varname">root</code> user. </p><p>
- grub/menu.lst
- </p><p>
- If your system uses <span class="application">grub</span> then edit file <code class="filename">/boot/grub/menu.lst</code> and add a new reference to the new <code class="filename">initrd.img</code>, <code class="filename">System.map</code> and <code class="filename">vmlinuz</code> files installed in folder <code class="filename">/boot</code> by this script. We recommend adding these references as the last ones in the file so that the new kernel does not start by default. Once you are confident that everything works, you can then move the references to the first entry. We also recommend setting the <code class="varname">timeout</code> value to <code class="constant">10</code> for now.
- </p></div><div class="example"><a name="idp20653016"></a><p class="title"><b>Example 2.4.
- <span class="quote">“<span class="quote">send-to-self</span>”</span> Patch Listing
- </b></p><div class="example-contents"><p>
- The following <span class="quote">“<span class="quote">send-to-self</span>”</span> patch is specifically for <span class="productname">Linux</span>™ kernel 2.6.30 and is provided for information only. For practical purposes, the patch has not changed much from version to version but the line numbers have changed. Some recent <span class="quote">“<span class="quote">send-to-self</span>”</span> patches are included in the toolkit <code class="filename">./patches</code> folder.
- </p><pre class="programlisting">
- diff -urp v2.6.30/linux/Documentation/networking/ip-sysctl.txt linux/Documentation/networking/ip-sysctl.txt
- --- v2.6.30/linux/Documentation/networking/ip-sysctl.txt 2009-06-13 10:53:29.000000000 +0300
- +++ linux/Documentation/networking/ip-sysctl.txt 2009-06-13 15:54:15.000000000 +0300
- @@ -637,6 +637,13 @@ accept_redirects - BOOLEAN
- forwarding - BOOLEAN
- Enable IP forwarding on this interface.
-
- +loop - BOOLEAN
- + By default (loop=0) the traffic between local IP addresses
- + is routed via interface "lo". Setting this flag for two
- + interfaces allows traffic between their IP addresses to
- + be looped externally. This is useful for setups where the
- + interfaces are attached to same broadcast medium.
- +
- mc_forwarding - BOOLEAN
- Do multicast routing. The kernel needs to be compiled with CONFIG_MROUTE
- and a multicast routing daemon is required.
- diff -urp v2.6.30/linux/include/linux/inetdevice.h linux/include/linux/inetdevice.h
- --- v2.6.30/linux/include/linux/inetdevice.h 2009-06-13 10:53:56.000000000 +0300
- +++ linux/include/linux/inetdevice.h 2009-06-13 15:54:15.000000000 +0300
- @@ -106,6 +106,7 @@ static inline void ipv4_devconf_setall(s
- IN_DEV_ORCONF((in_dev), ACCEPT_REDIRECTS)))
-
- #define IN_DEV_ARPFILTER(in_dev) IN_DEV_ORCONF((in_dev), ARPFILTER)
- +#define IN_DEV_LOOP(in_dev) IN_DEV_CONF_GET(in_dev, LOOP)
- #define IN_DEV_ARP_ANNOUNCE(in_dev) IN_DEV_MAXCONF((in_dev), ARP_ANNOUNCE)
- #define IN_DEV_ARP_IGNORE(in_dev) IN_DEV_MAXCONF((in_dev), ARP_IGNORE)
- #define IN_DEV_ARP_NOTIFY(in_dev) IN_DEV_MAXCONF((in_dev), ARP_NOTIFY)
- diff -urp v2.6.30/linux/include/linux/sysctl.h linux/include/linux/sysctl.h
- --- v2.6.30/linux/include/linux/sysctl.h 2009-06-13 10:53:56.000000000 +0300
- +++ linux/include/linux/sysctl.h 2009-06-13 15:54:40.000000000 +0300
- @@ -491,6 +491,7 @@ enum
- NET_IPV4_CONF_PROMOTE_SECONDARIES=20,
- NET_IPV4_CONF_ARP_ACCEPT=21,
- NET_IPV4_CONF_ARP_NOTIFY=22,
- + NET_IPV4_CONF_LOOP=23,
- __NET_IPV4_CONF_MAX
- };
-
- diff -urp v2.6.30/linux/kernel/sysctl_check.c linux/kernel/sysctl_check.c
- --- v2.6.30/linux/kernel/sysctl_check.c 2009-06-13 10:53:57.000000000 +0300
- +++ linux/kernel/sysctl_check.c 2009-06-13 15:55:00.000000000 +0300
- @@ -220,6 +220,7 @@ static const struct trans_ctl_table tran
- { NET_IPV4_CONF_PROMOTE_SECONDARIES, "promote_secondaries" },
- { NET_IPV4_CONF_ARP_ACCEPT, "arp_accept" },
- { NET_IPV4_CONF_ARP_NOTIFY, "arp_notify" },
- + { NET_IPV4_CONF_LOOP, "loop" },
- {}
- };
-
- diff -urp v2.6.30/linux/net/ipv4/devinet.c linux/net/ipv4/devinet.c
- --- v2.6.30/linux/net/ipv4/devinet.c 2009-06-13 10:53:58.000000000 +0300
- +++ linux/net/ipv4/devinet.c 2009-06-13 15:55:22.000000000 +0300
- @@ -1449,6 +1449,7 @@ static struct devinet_sysctl_table {
- DEVINET_SYSCTL_RW_ENTRY(ARP_IGNORE, "arp_ignore"),
- DEVINET_SYSCTL_RW_ENTRY(ARP_ACCEPT, "arp_accept"),
- DEVINET_SYSCTL_RW_ENTRY(ARP_NOTIFY, "arp_notify"),
- + DEVINET_SYSCTL_RW_ENTRY(LOOP, "loop"),
-
- DEVINET_SYSCTL_FLUSHING_ENTRY(NOXFRM, "disable_xfrm"),
- DEVINET_SYSCTL_FLUSHING_ENTRY(NOPOLICY, "disable_policy"),
- diff -urp v2.6.30/linux/net/ipv4/fib_frontend.c linux/net/ipv4/fib_frontend.c
- --- v2.6.30/linux/net/ipv4/fib_frontend.c 2009-06-13 10:53:58.000000000 +0300
- +++ linux/net/ipv4/fib_frontend.c 2009-06-13 15:54:15.000000000 +0300
- @@ -239,16 +239,17 @@ int fib_validate_source(__be32 src, __be
- .tos = tos } },
- .iif = oif };
- struct fib_result res;
- - int no_addr, rpf;
- + int no_addr, rpf, loop;
- int ret;
- struct net *net;
-
- - no_addr = rpf = 0;
- + no_addr = rpf = loop = 0;
- rcu_read_lock();
- in_dev = __in_dev_get_rcu(dev);
- if (in_dev) {
- no_addr = in_dev->ifa_list == NULL;
- rpf = IN_DEV_RPFILTER(in_dev);
- + loop = IN_DEV_LOOP(in_dev);
- }
- rcu_read_unlock();
-
- @@ -258,6 +259,11 @@ int fib_validate_source(__be32 src, __be
- net = dev_net(dev);
- if (fib_lookup(net, &fl, &res))
- goto last_resort;
- + if (loop && res.type == RTN_LOCAL) {
- + *spec_dst = FIB_RES_PREFSRC(res);
- + fib_res_put(&res);
- + return 0;
- + }
- if (res.type != RTN_UNICAST)
- goto e_inval_res;
- *spec_dst = FIB_RES_PREFSRC(res);
- diff -urp v2.6.30/linux/net/ipv4/route.c linux/net/ipv4/route.c
- --- v2.6.30/linux/net/ipv4/route.c 2009-06-13 10:53:58.000000000 +0300
- +++ linux/net/ipv4/route.c 2009-06-13 15:54:15.000000000 +0300
- @@ -2521,6 +2521,11 @@ static int ip_route_output_slow(struct n
- dev_put(dev_out);
- goto out; /* Wrong error code */
- }
- + err = -ENETDOWN;
- + if (!(dev_out->flags&IFF_UP)) {
- + dev_put(dev_out);
- + goto out;
- + }
-
- if (ipv4_is_local_multicast(oldflp->fl4_dst) ||
- oldflp->fl4_dst == htonl(0xFFFFFFFF)) {
- @@ -2588,10 +2593,41 @@ static int ip_route_output_slow(struct n
- free_res = 1;
-
- if (res.type == RTN_LOCAL) {
- - if (!fl.fl4_src)
- - fl.fl4_src = fl.fl4_dst;
- + struct in_device *in_dev;
- + __be32 src;
- +
- if (dev_out)
- dev_put(dev_out);
- + dev_out = FIB_RES_DEV(res);
- + in_dev = in_dev_get(dev_out);
- + src = fl.fl4_src? : FIB_RES_PREFSRC(res);
- + if (in_dev && IN_DEV_LOOP(in_dev) && src) {
- + struct net_device *dev_src;
- +
- + in_dev_put(in_dev);
- + in_dev = NULL;
- + dev_src = ip_dev_find(net, src);
- + if (dev_src && dev_src != dev_out &&
- + (in_dev = in_dev_get(dev_src)) &&
- + IN_DEV_LOOP(in_dev)) {
- + in_dev_put(in_dev);
- + dev_out = dev_src;
- + fl.fl4_src = src;
- + fl.oif = dev_out->ifindex;
- + res.type = RTN_UNICAST;
- + if (res.fi) {
- + fib_info_put(res.fi);
- + res.fi = NULL;
- + }
- + goto make_route;
- + }
- + if (dev_src)
- + dev_put(dev_src);
- + }
- + if (in_dev)
- + in_dev_put(in_dev);
- + if (!fl.fl4_src)
- + fl.fl4_src = fl.fl4_dst;
- dev_out = net->loopback_dev;
- dev_hold(dev_out);
- fl.oif = dev_out->ifindex;
- </pre></div></div><br class="example-break"></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ch02s05.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ch02.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ch03.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">
- Powerline Workstations
- </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 3.
- Software
- </td></tr></table></div></body></html>
|