search for: af_inet6

...g is 127.0.0.1 and rule check not working is ::ffff:127.0.0.1. I am using the following versions, compiled today (5/31). libnftnl-1.0.6-x86_64-1 nftables-e049f92bb7b98dfa218eda2b9b6f14506238abf2-x86_64-1 Without flags interval: socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 5 connect(5, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(5, {sa_family=AF_INET6, sin6_port=htons(45890), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 connect(5, {sa_family...

...#39;from' and 'myaddr' have the > > same AF, however the above patch only cannonizes 'myaddr'. Ultimately this > > results in the daemon attempting to use a socket with two address families and > > fails: > > > > recvmsg(0, {msg_name(28)={sa_family=AF_INET6, sin6_port=htons(34500), inet_pton(AF_INET6, "::ffff:10.0.0.192", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, msg_iov(1)=[{"\0\1pxelinux.0\0netascii\0", 65468}], msg_controllen=40, {cmsg_len=36, cmsg_level=SOL_IPV6, cmsg_type=, ...}, msg_flags=0}, 0) = 22 > > [..]...

...les and noticed very long running yum updates. I think that happened because firewall is dropping outgoing packets to port 80. Well, I thought to mitigate the issue and changed outgoing from drop to reject. Now I try manually # strace telnet 2a02:180:ffff:1::551f:b966 80 ... connect(3, {sa_family=AF_INET6, sin6_port=htons(80), inet_pton(AF_INET6, "2a02:180:ffff:1::551f:b966", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28 3 second delay ) = -1 ECONNREFUSED (Connection refused) ... The ECONNREFUSED is quite expected of course, but what is not expected that the connect syscall las...

right now icecast2 listens to 0.0.0.0 by default if bind-address is not defined. it should rather listen to :: if ipv6 is available. the change is rather small. i do not know how that works on systems that do not support IPv6 yet. so i added #ifdef AF_INET6, is that the right way to check for ipv6? attached is a patch against http://svn.xiph.org/icecast/trunk/net/ if it is ok like that it would be good to apply it for the next release. j -------------- next part -------------- A non-text attachment was scrubbed... Name: icecast2-listentoipv6_by_def...

...Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at mindrot.org ReportedBy: arekm at pld-linux.org Created attachment 2105 --> https://bugzilla.mindrot.org/attachment.cgi?id=2105 sshd log for that When AF_INET6 socket creation is allowed but bind()ing to ::1 is impossible then sshd loops until MAX_DISPLAYS is reached trying to bind to ::1 and then fails. This takes several seconds unfortunately which slows down login process a lot. When such scenario can happen, so AF_INET6 socket creation is allowed but...

Hi, Dear OpenSSH support, I'm writing to ask whether this bug is fixed in your openSSH 6.0. If no, do you have any plan? https://bugzilla.redhat.com/show_bug.cgi?id=640857 Regards, Carol

Signed-off-by: Eugene Surovegin <surovegin at google.com> --- usr/klibc/inet/inet_pton.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr/klibc/inet/inet_pton.c b/usr/klibc/inet/inet_pton.c index 19fe16e..2df6b67 100644 --- a/usr/klibc/inet/inet_pton.c +++ b/usr/klibc/inet/inet_pton.c @@ -38,7 +38,7 @@ int inet_pton(int af, const char *src, void *dst) /* A

...LD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7fcc0c8) = 5967 [...SNIP...] [pid 5967] execve("/opt/openssh/sbin/sshd", ["/opt/openssh/sbin/sshd", "-p", "24", "-R"], [/* 25 vars */]) = 0 [...SNIP...] [pid 5967] getpeername(3, {sa_family=AF_INET6, sin6_port=htons(4040), inet_pton(AF_INET6, "::ffff:82.36.183.26", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 [...SNIP...] [pid 5967] getpeername(3, {sa_family=AF_INET6, sin6_port=htons(4040), inet_pton(AF_INET6, "::ffff:82.36.183.26", &sin6_addr), sin...

...ot;..., 1024) = 1024 read(4, "\n# and 10.3 in RFC 3484. The"..., 1024) = 301 read(4, "", 1024) = 0 close(4) = 0 munmap(0xb7f83000, 4096) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET6, sin6_port=htons(873), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(4, {sa_family=AF_INET6, sin6_port=htons(35626), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 connect(4, {sa_fa...

...d to an incomplete type nsswitch/winbind_nss_solaris.c:397: arithmetic on pointer to an incomplete type nsswitch/winbind_nss_solaris.c:421: arithmetic on pointer to an incomplete type nsswitch/winbind_nss_solaris.c:421: dereferencing pointer to incomplete type nsswitch/winbind_nss_solaris.c:423: `AF_INET6' undeclared (first use in this function) nsswitch/winbind_nss_solaris.c:423: (Each undeclared identifier is reported only once nsswitch/winbind_nss_solaris.c:423: for each function it appears in.) nsswitch/winbind_nss_solaris.c:423: arithmetic on pointer to an incomplete type nsswitch/winbin...

I'm getting the following warning in my logwatch, or if I restart the spamassassin service. I've tried yum-reinstalling the packages involved but that didn't help. ------------------------------- /etc/cron.daily/sa-learn: Subroutine IO::Socket::INET6::AF_INET6 redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib/perl5/vendor_perl/5.8.8/IO/Socket/INET6.pm line 16 Subroutine Net::DNS::Resolver::Base::AF_INET6 redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread- multi/Net/DNS/Res...

...and 'myaddr' have the >>> same AF, however the above patch only cannonizes 'myaddr'. Ultimately this >>> results in the daemon attempting to use a socket with two address families and >>> fails: >>> >>> recvmsg(0, {msg_name(28)={sa_family=AF_INET6, sin6_port=htons(34500), inet_pton(AF_INET6, "::ffff:10.0.0.192", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, msg_iov(1)=[{"\0\1pxelinux.0\0netascii\0", 65468}], msg_controllen=40, {cmsg_len=36, cmsg_level=SOL_IPV6, cmsg_type=, ...}, msg_flags=0}, 0) = 22 >>> [....

...- for (p = addr; *p && (dots <= 3); p++) { - if (*p == '.') - dots++; - } - if (dots > 3) { - /* more than 4 parts to IP address, must be ipv6 */ - ssp = (struct sockaddr_storage *) &sin6; - ss_len = sizeof sin6; - memset(ssp, 0, ss_len); - inet_pton(AF_INET6, addr, &sin6.sin6_addr); - sin6.sin6_family = AF_INET6; - } else -#endif - { - ssp = (struct sockaddr_storage *) &sin; - ss_len = sizeof sin; - memset(ssp, 0, ss_len); - inet_pton(AF_INET, addr, &sin.sin_addr); - sin.sin_family = AF_INET; + struct addrinfo hint; + struct...

...NULL for these 2 calls. --------------------------------------------------------------------------- For getaddrinfo("0.0.0.0, ...") call, Internally, it will call these 2 APIs to collect information for both IPv4 and IPv6 addresses since hint is NULL: gethostbyname2("0.0.0.0", AF_INET6) gethostbyname2("0.0.0.0", AF_INET) In gethostbyname2 ("0.0.0.0", AF_INET6); It's asking for an IPv6 address mapping. "0.0.0.0" itself is NOT an IPv6 address, so resolver treats it as a hostname. You will see an AAAA query for hostname "0.0.0.0". In get...

...;props.saddr.a4; - tunnel = 1; + + if (xfrm[i]->props.mode == XFRM_MODE_TUNNEL || xfrm[i]->props.mode == XFRM_MODE_BEET) { + outer_family = xfrm[i]->props.family; + beet = (xfrm[i]->props.mode == XFRM_MODE_BEET); + + if(outer_family == AF_INET6){ + remote.in6 = (struct in6_addr*)&xfrm[i]->id.daddr; + local.in6 = (struct in6_addr*)&xfrm[i]->props.saddr; + } else if(outer_family == AF_INET){ + remote.in = (struct in_addr*)&xfrm[i]->id.daddr; + local....

...6]) = 3 rt_sigaction(SIGCHLD, {0x80768c0, [], SA_NOCLDSTOP}, NULL, 8) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e196f8) = 7117 close(3) = 0 select(6, [4 5], NULL, NULL, NULL) = 1 (in [4]) accept(4, {sa_family=AF_INET6, sin6_port=htons(55783), inet_pton(AF_INET6, "xxxxxxxxxxxxxxx", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 3 rt_sigaction(SIGCHLD, {0x80768c0, [], SA_NOCLDSTOP}, NULL, 8) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e196...

...d to an incomplete type nsswitch/winbind_nss_solaris.c:397: arithmetic on pointer to an incomplete type nsswitch/winbind_nss_solaris.c:421: arithmetic on pointer to an incomplete type nsswitch/winbind_nss_solaris.c:421: dereferencing pointer to incomplete type nsswitch/winbind_nss_solaris.c:423: `AF_INET6' undeclared (first use in this function) nsswitch/winbind_nss_solaris.c:423: (Each undeclared identifier is reported only once nsswitch/winbind_nss_solaris.c:423: for each function it appears in.) nsswitch/winbind_nss_solaris.c:423: arithmetic on pointer to an incomplete type nsswitch/winbin...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded 1.2.1pre18. This is mainly merges from the OpenBSD tree, bugfixes for Solaris and libc5 Linux systems. It should fix all reported bugs except the snprintf problems on some older Solaris versions. Please test thoroughly, my hope is to have a stable version released before Jan 1. At this point the main holdup is Solaris. I have

https://bugzilla.mindrot.org/show_bug.cgi?id=1457 --- Comment #9 from Ian Donaldson <iand at ekit-inc.com> --- Ok agreed, my patch reopens that CVE. The problem is that on Solaris 9 and Solaris 10 if you don't have IPv6 addresses configured, getaddrinfo() returns both AF_INET and AF_INET6 entries, and it returns AF_INET6 *first*. An attempted bind() to an AF_INET6 address on a system without IPv6 addresses configured returns EADDRNOTAVAIL, and the distributed code will not try the AF_INET (IPV4) bind at all; my patch allows it to continue on, but as you say that creates a potentia...

Check this out: % sa-update Subroutine NetAddr::IP::UtilPolluted::AF_INET6 redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/NetAddr/IP/Util.pm line 180 ******************************************************************************* Gilbert Sebenste *...