Re: possible regression in ipf 5.1.1?

"Logan O'Sullivan Bruns" <[email protected]> Tue, 6 Mar 2012 09:15:42 -0800

Newsgroups	gmane.comp.security.firewalls.ipfilter
Message-ID	<7443_1331054193_4F564671_7443_1846_1_20120306171539.GA21811@kafka.gedanken.org>

Yes, that fixes it. Thanks!

  - logan

On Wed, Mar 07, 2012 at 02:25:00AM +1100, Darren Reed wrote:
> With the IP addresses you were communicating with, it hits a
> bug with how multicast packets are detected.
> 
> Please try this patch out.
> 
> Darren
> 
> --- fil.c.orig  Tue Mar  6 00:35:51 2012
> +++ fil.c       Tue Mar  6 00:33:40 2012
> @@ -1705,7 +1705,7 @@
>         fin->fin_crc += fi->fi_saddr;
>         fi->fi_daddr = ip->ip_dst.s_addr;
>         fin->fin_crc += fi->fi_daddr;
> -       if (IN_CLASSD(fi->fi_daddr))
> +       if (IN_CLASSD(ntohl(fi->fi_daddr)))
>                 fin->fin_flx |= FI_MULTICAST|FI_MBCAST;
> 
>         /*