Debian Bug report logs - #498498
iproute: adding route blackholes doesn't work for IPv6

version graph

Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@lists.debian.org>;

Reported by: Thomas Jacob <jacob@internet24.de>

Date: Wed, 10 Sep 2008 14:57:28 UTC

Severity: wishlist

Tags: ipv6, upstream

Found in version linux/3.2.41-2

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian iproute maintainers <ah-iproute@debian.org>:
Bug#498498; Package iproute. Full text and rfc822 format available.

Acknowledgement sent to Thomas Jacob <jacob@internet24.de>:
New Bug report received and forwarded. Copy sent to Debian iproute maintainers <ah-iproute@debian.org>. Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Thomas Jacob <jacob@internet24.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: iproute: adding route blackholes doesn't work for IPv6
Date: Wed, 10 Sep 2008 15:43:37 +0200
Package: iproute
Version: 20080725-2
Severity: normal


Trying to set up routing black holes  results
in an error message:

# ip  route add to blackhole 2001::1/128
RTNETLINK answers: No such device

The same thing happens on etch.

This could mean that this feature is not implemented
yet for IPv6, but there appears to be some code that
deals with it in linux/net/ipv6/route.c on 2.6.26...

Most likely an issue for upstream.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages iproute depends on:
ii  libc6                         2.7-13     GNU C Library: Shared libraries
ii  libdb4.6                      4.6.21-8   Berkeley v4.6 Database Libraries [

Versions of packages iproute recommends:
ii  libatm1                       2.4.1-17.2 shared library for ATM (Asynchrono

Versions of packages iproute suggests:
pn  iproute-doc                   <none>     (no description available)

-- no debconf information




Information forwarded to debian-bugs-dist@lists.debian.org, Debian iproute maintainers <ah-iproute@debian.org>:
Bug#498498; Package iproute. Full text and rfc822 format available.

Acknowledgement sent to Andreas Henriksson <andreas@fatal.se>:
Extra info received and forwarded to list. Copy sent to Debian iproute maintainers <ah-iproute@debian.org>. Full text and rfc822 format available.

Message #10 received at 498498@bugs.debian.org (full text, mbox):

From: Andreas Henriksson <andreas@fatal.se>
To: Thomas Jacob <jacob@internet24.de>, 498498@bugs.debian.org
Subject: Re: Bug#498498: iproute: adding route blackholes doesn't work for IPv6
Date: Tue, 16 Sep 2008 20:43:00 +0200
On ons, 2008-09-10 at 15:43 +0200, Thomas Jacob wrote:
[...]
> # ip  route add to blackhole 2001::1/128
> RTNETLINK answers: No such device
[...]

Could you please try to specify a device name as well? Seems to work
here:

$ ping6 -c 1 2001::1
PING 2001::1(2001::1) 56 data bytes

--- 2001::1 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

$ sudo ip route add to blackhole 2001::1/128 dev lo
$ ip -6 ro sh | grep 2001::1
unreachable 2001::1 dev lo  metric 1024  error -101 mtu 16436 advmss 16376 hoplimit 4294967295
$ ping6 -c 1 2001::1
connect: Network is unreachable
$ sudo ip ro del 2001::1
$ 


Please tell me if you still think this is a bug in iproute (and please
describe it a bit more so I can understand the problem).


-- 
Regards,
Andreas Henriksson




Information forwarded to debian-bugs-dist@lists.debian.org, Debian iproute maintainers <ah-iproute@debian.org>:
Bug#498498; Package iproute. Full text and rfc822 format available.

Acknowledgement sent to Thomas Jacob <jacob@internet24.de>:
Extra info received and forwarded to list. Copy sent to Debian iproute maintainers <ah-iproute@debian.org>. Full text and rfc822 format available.

Message #15 received at 498498@bugs.debian.org (full text, mbox):

From: Thomas Jacob <jacob@internet24.de>
To: Andreas Henriksson <andreas@fatal.se>
Subject: Re: Bug#498498: iproute: adding route blackholes doesn't work for IPv6
Date: Tue, 16 Sep 2008 21:04:53 +0200
[Message part 1 (text/plain, inline)]
Hello,

> $ sudo ip route add to blackhole 2001::1/128 dev lo
> $ ip -6 ro sh | grep 2001::1
> unreachable 2001::1 dev lo  metric 1024  error -101 mtu 16436 advmss 16376 hoplimit 4294967295
> $ ping6 -c 1 2001::1
> connect: Network is unreachable

Interestingly this work fine with lo interfaces, but
not with "real" interfaces.

(to ensure our default gw is not blackholed as per default)
$ ip -6 route add default via fe80::1 dev eth0

$ ip route add to blackhole 2001::1/128 dev eth1

$ ip -6 route | grep 2001::1
2001::1 dev eth1  metric 1024  expires 21334286sec mtu 1500 advmss 1440 hoplimit 4294967295
(looks just like a normal route)

$ ping6 -c 1 2001::1
PING 2001::1(2001::1) 56 data bytes
From fe80::2e0:18ff:fe66:e24a icmp_seq=1 Destination unreachable: Address unreachable

(at the same time)

$ tcpdump -i eth1 -n -p ip6
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
20:57:46.983658 IP6 fe80::xxxx:xxxx:xxxx:xxxx > ff02::1:ff00:1: ICMP6, neighbor solicitation, who has 2001::1, length 32
<no answer, obviously>

(afterwards)
$ ip -6 neigh | grep 2001::1
2001::1 dev eth1  FAILED

Hence this route is just a normal device route, despite the blackhole
type being specified in the command.

But of course, the device doesn't matter, so dev lo seems fine.

On the other hand, unreachable is not the same as blackhole, at
least in IPv4, so even the dev lo version doesn't really do
what one would expect from the man page.

So I'd still call this a bug, either in the documentation
or the iproute/kernel implementation, albeit a less
severe one, as the dev lo thing should be a valid
alternative in most cases (unless you really just
want those packets to be dropped instead of also
sending out ICMP unreachable messages).

   Thomas
[signature.asc (application/pgp-signature, inline)]

Tags added: upstream Request was from Andreas Henriksson <andreas@fatal.se> to control@bugs.debian.org. (Sat, 20 Sep 2008 23:12:06 GMT) Full text and rfc822 format available.

Added tag(s) ipv6. Request was from Simon Paillard <simon.paillard@resel.enst-bretagne.fr> to control@bugs.debian.org. (Sat, 16 Jan 2010 19:48:24 GMT) Full text and rfc822 format available.

Severity set to 'serious' from 'normal' Request was from Clint Adams <schizo@debian.org> to control@bugs.debian.org. (Tue, 23 Mar 2010 01:03:16 GMT) Full text and rfc822 format available.

Added tag(s) sid and squeeze. Request was from Gerfried Fuchs <rhonda@debian.at> to control@bugs.debian.org. (Tue, 23 Mar 2010 07:51:30 GMT) Full text and rfc822 format available.

Severity set to 'normal' from 'serious' Request was from Gerfried Fuchs <rhonda@deb.at> to control@bugs.debian.org. (Tue, 23 Mar 2010 08:30:20 GMT) Full text and rfc822 format available.

Added tag(s) wheezy. Request was from Kurt Roeckx <kurt@roeckx.be> to control@bugs.debian.org. (Wed, 16 Feb 2011 19:03:18 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Debian iproute maintainers <ah-iproute@debian.org>:
Bug#498498; Package iproute. (Thu, 05 Jan 2012 09:03:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Michael Tsang <miklcct@gmail.com>:
Extra info received and forwarded to list. Copy sent to Debian iproute maintainers <ah-iproute@debian.org>. (Thu, 05 Jan 2012 09:03:07 GMT) Full text and rfc822 format available.

Message #32 received at 498498@bugs.debian.org (full text, mbox):

From: Michael Tsang <miklcct@gmail.com>
To: Debian Bug Tracking System <498498@bugs.debian.org>
Subject: Re: iproute: adding route blackholes doesn't work for IPv6
Date: Thu, 05 Jan 2012 17:00:37 +0800
Package: iproute
Version: 20111117-1
Followup-For: Bug #498498

ip -6 route add throw fd00::/8 does not work also

michael@server:/etc/network/if-pre-up.d$ sudo ip -6 route add throw fd00::/8
RTNETLINK answers: No such device



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.1.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_HK.UTF-8, LC_CTYPE=en_HK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iproute depends on:
ii  libc6     2.13-23
ii  libdb5.1  5.1.25-11

Versions of packages iproute recommends:
ii  libatm1  1:2.5.1-1.3

Versions of packages iproute suggests:
pn  iproute-doc  <none>

-- Configuration Files:
/etc/iproute2/rt_tables changed:
255	local
254	main
253	default
0	unspec


-- no debconf information




Bug reassigned from package 'iproute' to 'src:linux'. Request was from Ben Hutchings <ben@decadent.org.uk> to control@bugs.debian.org. (Sat, 13 Apr 2013 22:00:04 GMT) Full text and rfc822 format available.

No longer marked as found in versions iproute/20111117-1 and iproute/20080725-2. Request was from Ben Hutchings <ben@decadent.org.uk> to control@bugs.debian.org. (Sat, 13 Apr 2013 22:00:04 GMT) Full text and rfc822 format available.

Marked as found in versions linux/3.2.41-2. Request was from Ben Hutchings <ben@decadent.org.uk> to control@bugs.debian.org. (Sat, 13 Apr 2013 22:00:04 GMT) Full text and rfc822 format available.

Removed tag(s) squeeze, sid, and wheezy. Request was from Ben Hutchings <ben@decadent.org.uk> to control@bugs.debian.org. (Sat, 13 Apr 2013 22:00:05 GMT) Full text and rfc822 format available.

Severity set to 'wishlist' from 'normal' Request was from Ben Hutchings <ben@decadent.org.uk> to control@bugs.debian.org. (Sat, 13 Apr 2013 22:00:05 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Apr 17 11:24:53 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.