Dmitry Safonov 953af8e3ac
net/tcp: Ignore specific ICMPs for TCP-AO connections ...
Similarly to IPsec, RFC5925 prescribes:
">> A TCP-AO implementation MUST default to ignore incoming ICMPv4
messages of Type 3 (destination unreachable), Codes 2-4 (protocol
unreachable, port unreachable, and fragmentation needed -- ’hard
errors’), and ICMPv6 Type 1 (destination unreachable), Code 1
(administratively prohibited) and Code 4 (port unreachable) intended
for connections in synchronized states (ESTABLISHED, FIN-WAIT-1, FIN-
WAIT-2, CLOSE-WAIT, CLOSING, LAST-ACK, TIME-WAIT) that match MKTs."
A selftest (later in patch series) verifies that this attack is not
possible in this TCP-AO implementation.
Co-developed-by: Francesco Ruggeri <fruggeri@arista.com >
Signed-off-by: Francesco Ruggeri <fruggeri@arista.com >
Co-developed-by: Salam Noureddine <noureddine@arista.com >
Signed-off-by: Salam Noureddine <noureddine@arista.com >
Signed-off-by: Dmitry Safonov <dima@arista.com >
Acked-by: David Ahern <dsahern@kernel.org >
Signed-off-by: David S. Miller <davem@davemloft.net >
2023-10-27 10:35:45 +01:00
2023-01-19 17:14:18 +01:00
2023-06-22 09:44:28 +02:00
2023-05-14 16:05:28 +01:00
2022-11-17 22:49:39 +01:00
2022-09-21 18:42:55 +01:00
2022-06-28 21:26:05 +02:00
2023-09-06 18:09:12 +02:00
2022-06-28 21:26:05 +02:00
2023-08-22 15:13:20 +02:00
2022-06-28 21:26:05 +02:00
2022-08-09 19:51:05 +02:00
2023-04-27 18:49:24 -04:00
2022-06-28 21:26:05 +02:00
2023-05-30 15:20:08 +01:00
2023-03-30 23:24:24 -07:00
2023-08-09 14:17:06 +02:00
2022-04-29 14:38:03 -07:00
2022-11-23 19:55:22 +01:00
2023-06-20 14:28:17 -06:00
2022-05-13 10:56:10 +02:00
2022-11-04 16:56:41 +01:00
2022-08-11 10:31:19 -07:00
2022-12-22 18:18:37 -08:00
2023-03-10 21:05:16 +01:00
2022-10-31 07:29:47 -04:00
2023-05-30 16:42:00 -07:00
2022-12-27 12:52:10 +01:00
2023-01-21 19:01:59 +01:00
2023-07-24 20:11:54 -06:00
2023-10-24 16:06:03 -07:00
2022-06-07 10:20:42 -07:00
2023-08-21 14:54:48 +02:00
2023-04-17 19:52:19 +02:00
2022-05-18 00:11:18 +08:00
2023-06-22 09:44:28 +02:00
2023-06-06 17:05:54 -04:00
2022-05-15 18:31:28 -06:00
2022-09-24 08:50:04 +02:00
2022-09-24 08:50:04 +02:00
2023-07-14 08:43:49 -10:00
2023-07-23 11:34:22 +01:00
2022-06-28 21:26:05 +02:00
2023-04-18 16:39:34 -07:00
2023-06-08 10:11:17 -04:00
2023-04-22 14:41:30 -07:00
2022-06-28 21:26:05 +02:00
2023-01-20 09:33:22 +00:00
2023-10-23 16:12:46 -07:00
2023-07-20 17:24:57 -05:00
2023-03-06 15:49:07 -06:00
2023-03-06 15:49:07 -06:00
2023-03-30 15:57:50 -04:00
2022-06-28 21:26:05 +02:00
2022-06-20 18:21:25 +02:00
2023-10-15 16:08:24 +01:00
2022-08-29 15:32:13 +02:00
2022-06-03 20:09:27 +08:00
2023-08-23 14:17:42 -07:00
2023-09-08 11:24:38 -07:00
2023-06-12 08:50:48 +01:00
2023-01-23 12:44:18 +00:00
2023-06-15 14:55:15 +02:00
2023-03-10 21:05:16 +01:00
2023-04-19 23:39:42 -04:00
2022-11-28 12:46:23 -08:00
2023-02-07 12:53:53 +01:00
2022-04-04 08:55:23 +02:00
2023-05-25 13:16:57 +02:00
2022-06-28 21:26:05 +02:00
2023-06-06 07:54:00 +09:00
2023-03-16 21:20:32 -07:00
2022-06-28 21:26:05 +02:00
2022-12-01 19:58:50 -08:00
2023-08-09 15:43:27 +09:30
2023-08-16 12:39:38 +02:00
2022-08-10 13:49:50 +01:00
2022-05-04 11:06:13 +02:00
2023-08-22 15:21:34 +02:00
2023-10-24 12:02:02 +02:00
2023-05-24 22:05:24 -07:00
2022-09-20 11:53:32 +01:00
2023-03-10 21:05:16 +01:00
2023-04-12 23:18:45 +05:30
2022-10-28 12:36:34 +08:00
2022-06-28 21:26:05 +02:00
2023-04-21 08:25:50 +01:00
2022-09-15 09:08:09 +02:00
2023-10-26 20:02:41 -07:00
2022-08-18 20:37:35 -07:00
2023-10-12 09:15:15 +02:00
2022-06-28 21:26:05 +02:00
2022-12-12 09:29:56 +00:00
2022-03-11 08:28:27 -08:00
2023-07-19 09:56:48 -07:00
2022-06-28 21:26:05 +02:00
2023-05-23 15:38:59 +02:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2022-11-22 17:50:36 -08:00
2022-07-17 07:52:46 -07:00
2023-08-24 17:16:19 -06:00
2023-01-06 19:22:53 -08:00
2022-02-28 13:25:48 +01:00
2023-08-18 12:52:15 -03:00
2023-08-15 10:06:49 -06:00
2022-06-28 21:26:05 +02:00
2023-02-06 09:01:00 +00:00
2022-10-17 09:51:26 -05:00
2023-07-28 13:30:51 -07:00
2022-06-28 21:26:05 +02:00
2023-03-16 15:18:02 +01:00
2022-06-28 21:26:05 +02:00
2022-06-28 21:26:05 +02:00
2023-01-19 16:28:57 +01:00
2023-08-24 16:25:14 -07:00
2023-06-15 11:37:55 -04:00
2023-06-09 12:34:45 -04:00
2023-07-25 10:18:42 -06:00
2022-09-20 09:13:38 +02:00
2023-02-21 18:15:59 +01:00
2022-05-25 09:51:36 -07:00
2022-07-08 10:46:53 -07:00
2022-05-10 06:30:05 -06:00
2022-08-29 10:44:08 +02:00
2022-08-02 12:34:03 -04:00
2023-07-20 12:24:06 +02:00
2023-01-04 14:59:25 +01:00
2023-05-25 16:21:22 +02:00
2023-03-23 17:25:46 +01:00
2023-03-23 17:25:46 +01:00
2023-01-07 11:29:29 +01:00
2023-01-18 17:12:37 -08:00
2022-06-28 21:26:05 +02:00
2023-06-09 16:25:16 -07:00
2023-08-14 18:48:02 +02:00
2023-10-24 13:00:31 -07:00
2023-10-24 13:00:31 -07:00
2023-04-27 19:15:11 -06:00
2022-06-28 21:26:05 +02:00
2022-11-03 20:46:32 -07:00
2022-06-28 21:26:05 +02:00
2022-12-08 19:49:21 -08:00
2023-09-15 11:26:58 -07:00
2022-09-07 16:46:03 +02:00
2023-10-20 11:43:35 +01:00
2022-02-25 18:50:12 -05:00
2022-03-13 12:59:35 -04:00
2023-10-23 11:48:49 +02:00
2022-05-20 06:17:33 -06:00
2022-02-27 10:58:04 -08:00
2023-08-14 08:01:06 +01:00
2023-03-23 12:22:19 +09:00
2023-05-31 16:34:38 -05:00
2023-07-26 12:28:44 +02:00
2023-08-03 14:34:37 -07:00
2023-10-05 13:27:46 +02:00
2023-06-07 14:26:09 -06:00
2022-12-01 03:22:20 +00:00
2023-06-08 07:16:53 -07:00
2023-01-06 17:12:39 +00:00
2023-07-20 22:14:21 +12:00
2023-03-21 11:37:32 +01:00
2023-10-15 20:07:52 +01:00
2023-04-16 14:23:07 +02:00
2023-08-09 09:15:39 +02:00
2022-06-28 21:26:05 +02:00
2022-05-09 14:00:07 +02:00
2022-09-24 08:31:54 +02:00
2022-06-28 21:26:05 +02:00
2023-01-06 19:28:01 -08:00
2023-07-15 11:35:02 -07:00
2022-12-27 12:52:12 +01:00
2022-03-23 19:58:40 +01:00
2023-10-25 18:04:29 -07:00
2023-03-09 11:31:44 +01:00
2023-07-17 16:08:08 -07:00
2023-08-22 11:10:26 -06:00
2022-08-03 16:29:08 -07:00
2022-09-20 12:33:22 +02:00
2022-06-28 21:26:05 +02:00
2023-08-22 15:30:59 +02:00
2023-01-19 15:01:20 +01:00
2022-11-03 03:43:05 +01:00
2023-03-21 15:43:19 +01:00
2023-08-19 12:46:53 +01:00
2023-10-27 10:35:45 +01:00
2022-06-01 16:48:05 -07:00
2022-09-11 19:47:04 -05:00
2023-09-13 20:09:49 -07:00
2022-06-28 21:26:05 +02:00
2022-11-09 14:06:51 +01:00
2023-08-04 16:20:39 +02:00
2022-06-30 13:14:35 +02:00
2023-03-24 16:59:09 -04:00
2023-04-18 16:39:34 -07:00
2023-10-27 10:35:45 +01:00
2022-11-17 11:04:23 -08:00
2022-04-26 10:17:03 +02:00
2022-04-06 13:48:02 +01:00
2022-09-27 17:29:09 -07:00
2023-06-15 13:41:53 +02:00
2022-06-27 16:25:41 +02:00
2023-06-05 09:36:35 +02:00
2023-08-20 20:24:34 -06:00
2022-06-28 21:26:05 +02:00
2022-08-31 09:07:53 +02:00
2023-03-29 06:52:09 -04:00
2023-08-18 10:12:17 -07:00
2023-03-23 17:25:46 +01:00
2023-01-15 23:45:15 +02:00
2022-12-07 17:58:46 +01:00
2023-06-09 16:13:01 +01:00
2022-12-07 17:58:46 +01:00
2022-12-07 17:58:46 +01:00
2023-04-15 08:58:41 +01:00
2022-12-28 05:09:46 -05:00
2022-08-11 04:26:08 -04:00
2022-07-11 09:54:37 +02:00
2023-08-30 20:41:37 -07:00
2023-09-03 18:10:22 -04:00
2023-07-03 12:15:14 -04:00
2023-08-10 07:58:34 +02:00
2022-06-28 21:26:05 +02:00
2023-04-04 11:01:57 -04:00
2022-12-12 14:19:23 -08:00
2023-04-21 03:02:35 -04:00
2022-03-28 16:52:58 -04:00
2022-05-10 07:22:28 -04:00
2023-08-01 21:02:00 -07:00
2022-08-11 04:06:40 -04:00
2022-08-16 01:40:24 -04:00
2023-10-15 13:19:42 +01:00
2023-05-28 19:07:48 -06:00
2022-12-05 10:30:47 +01:00
953af8e3ac