snow/wireguard-go
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Verify source address

Browse source
This commit is contained in:
Mathias Hall-Andersen 2017-07-31 22:26:55 +02:00
parent 1fb00e8045
commit d7a49b8b8c
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/receive.go
View file

@ -508,8 +508,8 @@ func (peer *Peer) RoutineSequentialReceiver() {
// verify IPv4 source // verify IPv4 source
dst := elem.packet[IPv4offsetDst : IPv4offsetDst+net.IPv4len] src := elem.packet[IPv4offsetSrc : IPv4offsetSrc+net.IPv4len]
if device.routingTable.LookupIPv4(dst) != peer { if device.routingTable.LookupIPv4(src) != peer {
logInfo.Println("Packet with unallowed source IP from", peer.String()) logInfo.Println("Packet with unallowed source IP from", peer.String())
return return
} }
@ -529,8 +529,8 @@ func (peer *Peer) RoutineSequentialReceiver() {
// verify IPv6 source // verify IPv6 source
dst := elem.packet[IPv6offsetDst : IPv6offsetDst+net.IPv6len] src := elem.packet[IPv6offsetSrc : IPv6offsetSrc+net.IPv6len]
if device.routingTable.LookupIPv6(dst) != peer { if device.routingTable.LookupIPv6(src) != peer {
logInfo.Println("Packet with unallowed source IP from", peer.String()) logInfo.Println("Packet with unallowed source IP from", peer.String())
return return
} }