Re: [PATCH net-next] ipv6: Add icmp_echo_ignore_anycast for ICMPv6

2019-03-20 Thread David Miller
From: Stephen Suryaputra Date: Wed, 20 Mar 2019 10:29:27 -0400 > In addition to icmp_echo_ignore_multicast, there is a need to also > prevent responding to pings to anycast addresses for security. > > Signed-off-by: Stephen Suryaputra Applied, thank you.

[PATCH net-next] ipv6: Add icmp_echo_ignore_anycast for ICMPv6

2019-03-20 Thread Stephen Suryaputra
In addition to icmp_echo_ignore_multicast, there is a need to also prevent responding to pings to anycast addresses for security. Signed-off-by: Stephen Suryaputra --- Documentation/networking/ip-sysctl.txt | 5 + include/net/netns/ipv6.h | 1 + net/ipv6/af_inet6.c