diff options
author | Ondrej Zajicek <santiago@crfreenet.org> | 2023-01-22 23:42:08 +0100 |
---|---|---|
committer | Ondrej Zajicek <santiago@crfreenet.org> | 2023-01-22 23:42:08 +0100 |
commit | 99872676df45f1a490d3d63f43081afb41477040 (patch) | |
tree | 15f2be0eb931a385a97e2168711e7e5053feaca9 /lib/sha512.c | |
parent | a82683694da23799f247b3392a00efdd342afdfc (diff) |
BFD: Improve incoming packet matching
For active sessions, ignore received packets with zero local id and
mismatched remote id. That forces a session timeout instead of an
immediate session restart. It makes BFD sessions more resilient to
packet spoofing.
Thanks to André Grüneberg for the suggestion.
Diffstat (limited to 'lib/sha512.c')
0 files changed, 0 insertions, 0 deletions