|
Description
|
While testing the S10U4 a customer noticed that broadcast were being forwarded from one interface to another through ipfilter, although the ipfilter rules included "with no mbcast".
Evaluation:
-----------
Currently when we call out to the hooks, we pass the following information:
FW_HOOKS(ipst->ips_ip4_physical_in_event,
ipst->ips_ipv4firewall_physical_in,
ill, NULL, ipha, first_mp, mp, ipst);
The local variable flag, ll_multicast (representing whether or not the packet is a broadcast/multicast packet), is nowhere to be seen. In order to fix this problem we
need to do several things:
1) Add ll_multicast (or whatever happens to be the correct variable) to the FW_HOOKS macro;
2) introduce a new field to hook_pkt_event_t that can transport the information contained in ll_multicast to IPFilter;
3) modify IPFilter to recognise the flag(s) that are present.
|
