Messages in this thread | | | Date | Mon, 21 Oct 2013 20:02:23 -0700 | Subject | Re: [PATCH] Revert "bridge: only expire the mdb entry when query is received" | From | Cong Wang <> |
| |
On Sat, Oct 19, 2013 at 3:58 PM, Linus Lüssing <linus.luessing@web.de> wrote: > While this commit was a good attempt to fix issues occuring when no > multicast querier is present, this commit still has two more issues: > > 1) There are cases where mdb entries do not expire even if there is a > querier present. The bridge will unnecessarily continue flooding > multicast packets on the according ports. > > 2) Never removing an mdb entry could be exploited for a Denial of > Service by an attacker on the local link, slowly, but steadily eating up > all memory. >
I raised the first issue too when I sent the patch, but Herbert said it is not a problem. So, I will leave this to Herbert to decide.
For me, your patch makes sense.
Thanks. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |