RE: [PATCH v4 0/4] Add support for HS20 data frame filtering

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> -----Original Message-----
> From: Jouni Malinen [mailto:j@xxxxx]
> Sent: Friday, April 08, 2016 15:49
> To: Peer, Ilan
> Cc: hostap@xxxxxxxxxxxxxxxxxxx
> Subject: Re: [PATCH v4 0/4] Add support for HS20 data frame filtering
> 
> On Wed, Apr 06, 2016 at 05:14:39PM +0300, Ilan Peer wrote:
> > On association to an HS2.0 network, configure the following filtering
> > based on the net-sysfs APIs (based on net-next tree).
> >
> > 1. Enable gratuitous ARP filtering
> > 2. Enable unsolicited Neighbor Advertisement filtering 3. Enable GTK
> > filtering if DGAF disabled bit is zero
> >
> > In this version the filter configuration is done early in the
> > beginning of the connection flow which is not strictly compliant with
> > the HS 2.0 release 2 specification that requests to configure the
> > filters only after the IP address is set to avoid possible race
> > conditions. This can be changed later if needed.
> 
> Thanks, applied with some fixes (wpa_drv_configure_frame_filters() call
> from wpa_supplicant_cleanup() resulted in NULL pointer dereference in case
> interface initialization failed).
> 
> I've discussed the Hotspot 2.0 specification text and concluded that the
> correct behavior here is to ignore the part that might imply that IP address
> needs to be obtained before enabling filtering, so the design in this patch set
> is fine for that area.
> 

Great :) 10x.

Ilan.

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux