B.A.T.M.A.N July 2023

b.a.t.m.a.n@lists.open-mesh.org

8 participants
12 discussions

Authenticity of routing information in Batman
by Marek Küthe 03 Jul '23

03 Jul '23

Hello, I recently came across Batman Adv and the question arose in my mind whether it is possible to authenticate the routing information exchange - for example with HMAC as in babel. This would for example prevent attacks where a malicious node says "I have the perfect route to the destination!". I am not concerned with encryption or authentication of the traffic, only of the routing information. Is there anything like this in Batman (Adv)? If not, is it planned to implement something like this? If there isn't, does anyone have an idea how something like this could be done differently (in a different layer)? I would be very happy to receive answers! Greetings Marek Küthe -- Marek Küthe m.k(a)mk16.de er/ihm he/him

2 1

[PATCH] alfred: receive data with valid source on unix sock without active interface
by Marek Lindner 03 Jul '23

03 Jul '23

Signed-off-by: Marek Lindner <mareklindner(a)neomailbox.ch> --- unix_sock.c | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/unix_sock.c b/unix_sock.c index ce08a51..e6208ef 100644 --- a/unix_sock.c +++ b/unix_sock.c @@ -108,10 +108,6 @@ static int unix_sock_add_data(struct globals *globals, int len, data_len, ret = -1; struct interface *interface; - interface = netsock_first_interface(globals); - if (!interface) - goto err; - len = ntohs(push->header.length); if (len < (int)(sizeof(*push) - sizeof(push->header))) @@ -133,11 +129,26 @@ static int unix_sock_add_data(struct globals *globals, * source addresses. Otherwise the data would not be * synced between primary servers. */ - if (is_valid_ether_addr(data->source)) { + if (is_iface_disabled(globals->net_iface)) { + if (!is_valid_ether_addr(data->source)) + goto err; + + if (globals->opmode != OPMODE_PRIMARY) + goto err; + + } else if (is_valid_ether_addr(data->source)) { + interface = netsock_first_interface(globals); + if (!interface) + goto err; + if (memcmp(data->source, &interface->hwaddr, ETH_ALEN) != 0 && globals->opmode != OPMODE_PRIMARY) goto err; } else { + interface = netsock_first_interface(globals); + if (!interface) + goto err; + memcpy(data->source, &interface->hwaddr, ETH_ALEN); } -- 2.38.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

B.A.T.M.A.N July 2023