From Sebastien.Roy@Sun.COM Wed Sep 16 09:13:06 2009 Received: from dm-sfbay-01.sfbay.sun.com (dm-sfbay-01.SFBay.Sun.COM [129.145.155.118]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n8GGD52p028571 for ; Wed, 16 Sep 2009 09:13:05 -0700 (PDT) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n8GGD5GV009097 for ; Wed, 16 Sep 2009 09:13:05 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n8GGD4Rw000742 for ; Wed, 16 Sep 2009 16:13:04 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KQ200D00NKTF400@mail-amer.sun.com> for psarc-ext@sac.sfbay.sun.com; Wed, 16 Sep 2009 10:13:04 -0600 (MDT) Received: from [129.148.174.103] ([unknown] [129.148.174.103]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KQ200C33NPRGG20@mail-amer.sun.com>; Wed, 16 Sep 2009 10:13:03 -0600 (MDT) Date: Wed, 16 Sep 2009 12:10:55 -0400 From: Sebastien Roy Subject: netstat -r flags for blackhole and reject routes [PSARC/2009/495 FastTrack timeout 09/23/2009] Sender: Sebastien.Roy@Sun.COM To: psarc-ext Cc: "Erik.Nordmark" Message-id: <1253117455.24489.53.camel@strat> Organization: Sun Microsystems X-Mailer: Evolution 2.26.3 Status: RO Content-Length: 2778 I'm submitting this fast-track for Erik Nordmark. It times out on 09/23/2009. The release binding is Minor due to the change in semantics of the netstat -r 'B' route flag. Background: ---------- Using route(1m) the administrator can add reject or blackhole routes. A routing daemon can add them using route(7p). Such routes, if matched by a packet, have the effect of dropping the packet. A reject route would send an ICMP error when matched, and a blackhole would silently drop the packet. It is possible to see whether these flags are set on a route using "route get ". But the flags are not reported in netstat -r. That is odd given that their effect is completely different than other routes. BSD shows the setting of those flags in netstat -r. In NetBSD the letters are B RTF_BLACKHOLE Just discard pkts (during updates). R RTF_REJECT Host or net unreachable. In FreeBSD the letters are B RTF_BLACKHOLE Just discard pkts (during updates) b RTF_BROADCAST The route represents a broadcast address R RTF_REJECT Host or net unreachable Solaris currently uses 'B' for broadcast (in the netstat -ra output; does not appear without the 'a' option). Proposal: -------- Switch the current Solaris broadcast letter from 'B' to 'b' i.e. use the FreeBSD choice of letters above. (An alternative would be to keep 'B' for broadcast, and use the lower-case 'b' and 'r' for blackhole and reject, but that makes Solaris unique, which isn't necessarily a positive statement in this case.) Exported Interfaces ------------------------------------------------------------- Interface Classification Comments ------------------------------------------------------------- netstat -r output Uncommitted(*) netstat(1m) (*) PSARC/2001/355 has some background on this. Man page changes: ---------------- netstat(1m) is changed as follows: *** ipd.netstat.orig Tue Sep 15 23:15:55 2009 --- ipd.netstat.new Tue Sep 15 23:17:14 2009 *************** *** 692,699 **** --- 692,702 ---- D Route was created dynamically by a redirect. + B Packets will be silently dropped (RTF_BLACKHOLE set) + R Packets will be dropped with ICMP error sent (RTF_REJECT set) + If the -a option is specified, there will be routing entries with the following flags: *************** *** 700,706 **** A Combined routing and address resolution entries. ! B Broadcast addresses. L Local addresses for the host. --- 703,709 ---- A Combined routing and address resolution entries. ! b Broadcast addresses. L Local addresses for the host. From Kais.Belgaied@Sun.COM Wed Sep 16 09:22:18 2009 Received: from jurassic-x4600.sfbay.sun.com (cretaceous.SFBay.Sun.COM [129.146.17.59]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n8GGMH6g002740 for ; Wed, 16 Sep 2009 09:22:17 -0700 (PDT) Received: from [129.146.11.144] (sr1-jurassic-01.SFBay.Sun.COM [129.146.11.144]) by jurassic-x4600.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n8GGMFu4214443 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 16 Sep 2009 09:22:17 -0700 (PDT) Message-ID: <4AB110B7.6000804@Sun.COM> Date: Wed, 16 Sep 2009 09:22:15 -0700 From: Kais Belgaied User-Agent: Thunderbird 2.0.0.21 (X11/20090311) MIME-Version: 1.0 To: Sebastien Roy CC: psarc-ext , "Erik.Nordmark" Subject: Re: netstat -r flags for blackhole and reject routes [PSARC/2009/495 FastTrack timeout 09/23/2009] References: <1253117455.24489.53.camel@strat> In-Reply-To: <1253117455.24489.53.camel@strat> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 243 +1 Kais. On 09/16/09 09:10, Sebastien Roy wrote: > I'm submitting this fast-track for Erik Nordmark. It times out on > 09/23/2009. The release binding is Minor due to the change in semantics > of the netstat -r 'B' route flag. > > From Sebastien.Roy@Sun.COM Wed Sep 23 10:36:54 2009 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02.SFBay.Sun.COM [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n8NHar8L018575 for ; Wed, 23 Sep 2009 10:36:53 -0700 (PDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n8NHarHW050096 for ; Wed, 23 Sep 2009 10:36:53 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n8NHargB020420 for ; Wed, 23 Sep 2009 17:36:53 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KQF00700PUWCW00@mail-amer.sun.com> for psarc-ext@sac.sfbay.sun.com; Wed, 23 Sep 2009 11:36:53 -0600 (MDT) Received: from [129.148.174.103] ([unknown] [129.148.174.103]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KQF002MQQ9FV960@mail-amer.sun.com>; Wed, 23 Sep 2009 11:36:52 -0600 (MDT) Date: Wed, 23 Sep 2009 13:34:40 -0400 From: Sebastien Roy Subject: Re: netstat -r flags for blackhole and reject routes [PSARC/2009/495 FastTrack timeout 09/23/2009] In-reply-to: <1253117455.24489.53.camel@strat> Sender: Sebastien.Roy@Sun.COM To: psarc-ext Cc: "Erik.Nordmark" Message-id: <1253727280.29848.69.camel@strat> Organization: Sun Microsystems X-Mailer: Evolution 2.26.3 References: <1253117455.24489.53.camel@strat> Status: RO Content-Length: 297 On Wed, 2009-09-16 at 12:10 -0400, Sebastien Roy wrote: > I'm submitting this fast-track for Erik Nordmark. It times out on > 09/23/2009. The release binding is Minor due to the change in semantics > of the netstat -r 'B' route flag. This case was approved during today's PSARC meeting. -Seb