<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:PMingLiU;
panose-1:2 2 3 0 0 0 0 0 0 0;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:PMingLiU;
panose-1:2 2 3 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-AU link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi, <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I think theres a bug in the secure plugin code though
I’m not 100% sure since it seems to be so blatantly obvious I would have
thought it would have been detected by now. I’m running the secure plugin
on 3 freifunk routers called 104.3.69.1, 104.3.67.1 & 104.3.210.1. For
short I’ll call them 69, 67 and 210. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>From observing the control messages that the routers are
putting out the current network configuration is as such.:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>67 <------> 69 <-----> 210<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The output from the debug output (olsrd –d 9) does not
seem to correlate at all with what the routers are doing. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The following is the output from all 3 routers:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.69.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.210.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.210.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.210.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Challenge message received<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]To: 104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]No match for 104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Challenge: 0xadffdb2b<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Signature verified<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Building CRESPONSE message<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Challenge-response: 0xed5ec767<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp 1200976984<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Sending challenge response to
104.3.67.1 challenge 0xed5ec767<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Adding signature for packet
size 60<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]timestamp: 1200976984<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC] Message signed<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.67.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.67.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Response-response message
received<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]To: 104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Signature verified<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Entry-challenge 0xed5ec767<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Error in response signature
from 104.3.67.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.67.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.67.1<o:p></o:p></span></font></p>
<pre><font size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Checking packet for challenge response message...<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Challenge message received<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]To: 104.3.69.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]No match for 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Challenge: 0xadffdb2b<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Signature verified<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Building CRESPONSE message<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Challenge-response: 0xed5ec767<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Timestamp 1200976984<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Sending challenge response to 104.3.67.1 challenge 0xed5ec767<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Adding signature for packet size 60<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]timestamp: 1200976984<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC] Message signed<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Message from non-validated host!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Timestamp missmatch in packet from 104.3.67.1!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Rejecting packet from 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Checking packet for challenge response message...<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Message from non-validated host!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Timestamp missmatch in packet from 104.3.67.1!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Rejecting packet from 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Checking packet for challenge response message...<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Response-response message received<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]To: 104.3.69.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Signature verified<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Entry-challenge 0xed5ec767<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Error in response signature from 104.3.67.1!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Message from non-validated host!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Timestamp missmatch in packet from 104.3.67.1!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Rejecting packet from 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>INTERNET GATEWAY VIA vlan1 detected in routing table.<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Adding signature for packet size 20<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]timestamp: 1200976985<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC] Message signed<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Checking packet for challenge response message...<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Message from non-validated host!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Timestamp missmatch in packet from 104.3.67.1!<o:p></o:p></span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>[ENC]Rejecting packet from 104.3.67.1<o:p></o:p></span></font></pre>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>104.3.210.1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.67.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.67.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Checking packet for challenge
response message...<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Match for 104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Message from non-validated
host!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Timestamp missmatch in packet
from 104.3.69.1!<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=SimSun><span
style='font-size:10.0pt;font-family:SimSun'>[ENC]Rejecting packet from
104.3.69.1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>--------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>As you can see the out all 3 routers seem to be ignoring
each other though their control messages tell a different story ie.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>67 <------> 69 <-----> 210<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>It seems to me that the routers are
sending the challenge and challenge responses back and forth correctly but the
response response always fails:<br>
</span></font><font size=2 face=SimSun><span style='font-size:10.0pt;
font-family:SimSun'>[ENC]Error in response signature from 104.3.67.1!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Furthermore despite the failure will still forward those
routers in their TC messages etc.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>In fact, now that I think about it I have so far only once
seen a pair of routers with debug outputs indicating that they are accepting
each other as valid routers whilst their control messages said the opposite
story. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The bottom line is that debug output does not match what the
routers is actually doing.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Another issue I have run into is if you restart a router it
appears that the other routers will not drop that router from their timestamp
database for a long long time. So when the restarted router comes back online
the other routers think it’s a replay attack and discard all packets from
it. This is why 67 and 210 are not connected despite the fact that are sitting
ontop of each other on a stack.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>From what I’ve observed it takes hours for them to
drop the restarted router from the database. I’m wondering if this is a
bug or a design aspect. I’m thinking more bug as I would imagine that you
would instead want to just drop the original timestamp from the restarted
router and send a new challenge message. I acknowledge though that this could
make the network more vulnerable to a denial of service attack. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I know that the secure plugins have not been properly tested
and are still fairly buggy (see <a
href="http://lists.olsr.org/pipermail/olsr-users/2006-March/001499.html">http://lists.olsr.org/pipermail/olsr-users/2006-March/001499.html</a>)
However if someone could just confirm what I’m seeing then I’d be
happy to accept that and fix the problems myself. I need the secure plugin to
work in a fairly stable manner for my thesis project and I’d be glad to
share the code once its done.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Thanks<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Victor Kuo<o:p></o:p></span></font></p>
</div>
</body>
</html>