Re: possible regression in ipf 5.1.1?

Darren Reed <[email protected]> Wed, 07 Mar 2012 02:25:00 +1100

Newsgroups	gmane.comp.security.firewalls.ipfilter
Message-ID	<11075_1331047692_4F562D0B_11075_7166_1_4F562C4C.3010709@reed.wattle.id.au>

With the IP addresses you were communicating with, it hits a
bug with how multicast packets are detected.

Please try this patch out.

Darren

--- fil.c.orig  Tue Mar  6 00:35:51 2012
+++ fil.c       Tue Mar  6 00:33:40 2012
@@ -1705,7 +1705,7 @@
        fin->fin_crc += fi->fi_saddr;
        fi->fi_daddr = ip->ip_dst.s_addr;
        fin->fin_crc += fi->fi_daddr;
-       if (IN_CLASSD(fi->fi_daddr))
+       if (IN_CLASSD(ntohl(fi->fi_daddr)))
                fin->fin_flx |= FI_MULTICAST|FI_MBCAST;

        /*