for condition where a downstream peer is trying to connect to us, only validate the IP instead of IP/port;

r05a04_dev
Bryan Biedenkapp 3 weeks ago
parent 752213d48e
commit 028bd5c58d

@ -1194,10 +1194,9 @@ void FNENetwork::taskNetworkRx(NetPacketRequest* req)
} }
} }
} else { } else {
// perform source address/port validation // perform source address validation
if (connection->address() != udp::Socket::address(req->address) || if (connection->address() != udp::Socket::address(req->address)) {
connection->port() != udp::Socket::port(req->address)) { LogError(LOG_MASTER, "PEER %u RPTL NAK, IP address mismatch on RPTL attempt while not running, old = %s:%u, new = %s:%u, connectionState = %u", peerId,
LogError(LOG_MASTER, "PEER %u RPTL NAK, IP address/port mismatch on RPTL attempt while not running, old = %s:%u, new = %s:%u, connectionState = %u", peerId,
connection->address().c_str(), connection->port(), udp::Socket::address(req->address).c_str(), udp::Socket::port(req->address), connection->connectionState()); connection->address().c_str(), connection->port(), udp::Socket::address(req->address).c_str(), udp::Socket::port(req->address), connection->connectionState());
network->writePeerNAK(peerId, TAG_REPEATER_LOGIN, NET_CONN_NAK_FNE_UNAUTHORIZED, req->address, req->addrLen); network->writePeerNAK(peerId, TAG_REPEATER_LOGIN, NET_CONN_NAK_FNE_UNAUTHORIZED, req->address, req->addrLen);

Loading…
Cancel
Save

Powered by TurnKey Linux.