On Tue, Jan 14, 2020 at 11:54:32PM +0100, Klemens Nanni wrote:
> Came here while testing an IPv6 related sys/net/rtsock.c diff:  all
> invocations use `-q' and route(8) says
>
>            -q      Suppress all output.
>
> so the redirection is duplicate.  If route still prints to standard
> output despite the quiet flag I want to see such a bug and fix it.
>
> Note that this does not involve standard error which is neither effected
> by `-q' nor redirected.
>
> OK?

OK bluhm@

> Index: netstart
> ===================================================================
> RCS file: /cvs/src/etc/netstart,v
> retrieving revision 1.201
> diff -u -p -r1.201 netstart
> --- netstart  25 Oct 2019 06:01:27 -0000      1.201
> +++ netstart  14 Jan 2020 22:46:22 -0000
> @@ -254,26 +254,26 @@ if ifconfig lo0 inet6 >/dev/null 2>&1; t
>       ip6kernel=YES
>
>       # Disallow link-local unicast dest without outgoing scope identifiers.
> -     route -qn add -inet6 fe80:: -prefixlen 10 ::1 -reject >/dev/null
> +     route -qn add -inet6 fe80:: -prefixlen 10 ::1 -reject
>
>       # Disallow site-local unicast dest without outgoing scope identifiers.
>       # If you configure site-locals without scope id (it is permissible
>       # config for routers that are not on scope boundary), you may want
>       # to comment the line out.
> -     route -qn add -inet6 fec0:: -prefixlen 10 ::1 -reject >/dev/null
> +     route -qn add -inet6 fec0:: -prefixlen 10 ::1 -reject
>
>       # Disallow "internal" addresses to appear on the wire.
> -     route -qn add -inet6 ::ffff:0.0.0.0 -prefixlen 96 ::1 -reject >/dev/null
> +     route -qn add -inet6 ::ffff:0.0.0.0 -prefixlen 96 ::1 -reject
>
>       # Disallow packets to malicious 6to4 prefix.
> -     route -qn add -inet6 2002:e000:: -prefixlen 20 ::1 -reject >/dev/null
> -     route -qn add -inet6 2002:7f00:: -prefixlen 24 ::1 -reject >/dev/null
> -     route -qn add -inet6 2002:0000:: -prefixlen 24 ::1 -reject >/dev/null
> -     route -qn add -inet6 2002:ff00:: -prefixlen 24 ::1 -reject >/dev/null
> +     route -qn add -inet6 2002:e000:: -prefixlen 20 ::1 -reject
> +     route -qn add -inet6 2002:7f00:: -prefixlen 24 ::1 -reject
> +     route -qn add -inet6 2002:0000:: -prefixlen 24 ::1 -reject
> +     route -qn add -inet6 2002:ff00:: -prefixlen 24 ::1 -reject
>
>       # Disallow packets without scope identifier.
> -     route -qn add -inet6 ff01:: -prefixlen 16 ::1 -reject >/dev/null
> -     route -qn add -inet6 ff02:: -prefixlen 16 ::1 -reject >/dev/null
> +     route -qn add -inet6 ff01:: -prefixlen 16 ::1 -reject
> +     route -qn add -inet6 ff02:: -prefixlen 16 ::1 -reject
>
>       # Completely disallow packets to IPv4 compatible prefix.
>       #
> @@ -290,7 +290,7 @@ if ifconfig lo0 inet6 >/dev/null 2>&1; t
>       #
>       # Due to rare use of IPv4 compatible addresses, and security issues
>       # with it, we disable it by default.
> -     route -qn add -inet6 ::0.0.0.0 -prefixlen 96 ::1 -reject >/dev/null
> +     route -qn add -inet6 ::0.0.0.0 -prefixlen 96 ::1 -reject
>  else
>       ip6kernel=NO
>  fi

Reply via email to