OpenWrt/LEDE Project

  • Status Closed
  • Percent Complete
    100%
  • Task Type Bug Report
  • Category Packages
  • Assigned To
    Hans Dedecker
  • Operating System All
  • Severity High
  • Priority Very Low
  • Reported Version Trunk
  • Due in Version Undecided
  • Due Date Undecided
  • Private
Attached to Project: OpenWrt/LEDE Project
Opened by LGA1150 - 17.09.2018
Last edited by Hans Dedecker - 23.09.2018

FS#1853 - odhcpd: Router Advertisement message leaks to WAN in relay mode when stopping the service

Internet connection is DHCP(IPv4)/SLAAC(IPv6)

Current DHCP settings:

root@OpenWrt:~# uci show dhcp
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].rebind_protection='0'
dhcp.@dnsmasq[0].noresolv='1'
dhcp.@dnsmasq[0].localservice='0'
dhcp.@dnsmasq[0].nonwildcard='0'
dhcp.@dnsmasq[0].dnsforwardmax='1500'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.ra='relay'
dhcp.lan.ndp='relay'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.wan6=dhcp
dhcp.wan6.interface='wan'
dhcp.wan6.ra='relay'
dhcp.wan6.ndp='relay'
dhcp.wan6.master='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'

When stopping the odhcpd service by either

/etc/init.d/odhcpd stop

or

killall odhcpd

in relay mode, an RA message is sent to WAN by mistake.

Current workaround: dropping RA messages with ip6tables

ip6tables -A output_wan_rule -p icmpv6 --icmpv6-type 134 -j DROP
Closed by  Hans Dedecker
23.09.2018 18:36
Reason for closing:  Fixed
Additional comments about closing:  

Fixed in commit https://git.op enwrt.org/?p=project/odhcpd.git;a=commit ;h=ee7472a7df014028ffcac3e0da05d979380ae c4a

Project Manager
Hans Dedecker commented on 18.09.2018 08:18

Can you repeat the test by setting odhcpd loglevel to 7 (uci set dhcp.odhcpd.loglevel=7; uci commit) and do a logread after you've stopped odhcpd ?

LGA1150 commented on 20.09.2018 18:04
Fri Sep 21 01:58:20 2018 user.notice -------cut-here-------: <----- stopping odhcpd
Fri Sep 21 01:58:21 2018 daemon.info odhcpd[8126]: Using a RA lifetime of 0 seconds on eth1
Fri Sep 21 01:58:21 2018 daemon.notice odhcpd[8126]: Failed to send to ff02::1%eth1 (Operation not permitted)
Fri Sep 21 01:58:21 2018 daemon.info odhcpd[8126]: Using a RA lifetime of 0 seconds on br-lan
Fri Sep 21 01:58:21 2018 daemon.debug odhcpd[8126]: Sent 64 bytes to ff02::1%br-lan

It did try sending RA message to eth1(WAN), got `Operation not permitted` error because of that ip6tables rule I've used above.

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing