• Antonio Quartulli's avatar
    batman-adv: avoid DAT to mess up LAN state · f202a666
    Antonio Quartulli authored
    When a node running DAT receives an ARP request from the LAN for the
    first time, it is likely that this node will request the ARP entry
    through the distributed ARP table (DAT) in the mesh.
    
    Once a DAT reply is received the asking node must check if the MAC
    address for which the IP address has been asked is local. If it is, the
    node must drop the ARP reply bceause the client should have replied on
    its own locally.
    
    Forwarding this reply means fooling any L2 bridge (e.g. Ethernet
    switches) lying between the batman-adv node and the LAN. This happens
    because the L2 bridge will think that the client sending the ARP reply
    lies somewhere in the mesh, while this node is sitting in the same LAN.
    Reported-by: default avatarSimon Wunderlich <sw@simonwunderlich.de>
    Signed-off-by: default avatarMarek Lindner <mareklindner@neomailbox.ch>
    Signed-off-by: default avatarAntonio Quartulli <antonio@meshcoding.com>
    f202a666
distributed-arp-table.c 35 KB