diff options
| author | Ondrej Zajicek <santiago@crfreenet.org> | 2023-01-22 23:42:08 +0100 |
|---|---|---|
| committer | Ondrej Zajicek <santiago@crfreenet.org> | 2023-01-22 23:42:08 +0100 |
| commit | 99872676df45f1a490d3d63f43081afb41477040 (patch) | |
| tree | 15f2be0eb931a385a97e2168711e7e5053feaca9 /lib/md5.h | |
| parent | a82683694da23799f247b3392a00efdd342afdfc (diff) | |
BFD: Improve incoming packet matching
For active sessions, ignore received packets with zero local id and
mismatched remote id. That forces a session timeout instead of an
immediate session restart. It makes BFD sessions more resilient to
packet spoofing.
Thanks to André Grüneberg for the suggestion.
Diffstat (limited to 'lib/md5.h')
0 files changed, 0 insertions, 0 deletions