- Bird-users - Mailing Lists

BIRD security bug bounty program
by Christoph 23 Sep '19

23 Sep '19

Hello, do you run a security bug bounty program for BIRD 2 or make use of static source code analyzer like Coverity? thanks, Christoph

2 2

Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543
by Christoph 23 Sep '19

23 Sep '19

Hi, (please keep me in CC, thanks) I got the following somewhat strangely formatted log lines in /var/log/messages on a BIRD v2.0.6 instance connected to routinator3000 v0.5 ("r3k" bellow) running on FreeBSD 12: kernel: 8-48 AS2119 kernel: CS_UP' failed at nest/rt-table.c:1543 kernel: 9-22T00:59:04.466158+01:00 - - Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543 kernel: Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543 kernel: 6f8::/32-32 AS25525 kernel: :59:05.654000+01:00 bird 1144 - - Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543 kernel: P' failed at nest/rt-table.c:1543 kernel: acket (81.89.96.0/20-20 AS35366) kernel: nel_state == CS_UP' failed at nest/rt-table.c:1543 kernel: at nest/rt-table.c:1543 kernel: 22T00:59:10.355042+01:00 bird 1144 - - r3k: Received IPv4 Prefix packet (46.252.16.0/20-24 AS20738) kernel: ate == CS_UP' failed at nest/rt-table.c:1543 kernel: 0 bird 1144 - - Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543 kernel: 9)

2 5

Filters do not auto-reload on called function changes
by Matt Corallo 23 Sep '19

23 Sep '19

Upon upgrading from 2.0.4 to 2.0.6, filters which call changed functions (at least when those functions are in included from external files) are no longer automatically reloaded upon reconfiguration. Matt

3 3

privilege dropping on BSD?
by Christoph 22 Sep '19

22 Sep '19

Hello, (please keep me in CC, thanks) According to the documentation BIRD can not drop privileges on BSD systems: "The privilege restriction is not implemented in BSD port of BIRD." https://bird.network.cz/?get_doc&v=20&f=bird-1.html#ss1.4 Is privilege dropping on the roadmap that we will see in the future on BSD as well? thanks, Christoph

2 1

graceful restart command not shown in context help
by Christoph 22 Sep '19

22 Sep '19

Hello, (for some unknown reason I'm not getting any emails from this mailing list even though I'm subscribed, please keep me in CC if you reply thanks!) The NEWS entry for BIRD 2.0.5 mentions the graceful restart command: https://gitlab.labs.nic.cz/labs/bird/blob/master/NEWS :> Version 2.0.5 (2019-08-01) [...] > o Graceful restart command but I didn't see it in the "?" output so I assumed it does not exist: birdc BIRD 2.0.6 ready. bird> ? quit Quit the client exit Exit the client help Description of the help system show ... Show status information dump ... Dump debugging information eval <expr> Evaluate an expression echo ... Control echoing of log messages disable (<protocol> | "<pattern>" | all) [message] Disable protocol enable (<protocol> | "<pattern>" | all) [message] Enable protocol restart (<protocol> | "<pattern>" | all) [message] Restart protocol reload <protocol> | "<pattern>" | all Reload protocol debug ... Control protocol debugging via BIRD logs mrtdump ... Control protocol debugging via MRTdump files restrict Restrict current CLI session to safe commands configure ... Reload configuration down Shut the daemon down By using "g<tab>", auto-completion revealed the existence of the command and it works as intended. bird> graceful restart Graceful restart requested Connection closed by server Would be great to add it to the interactive help output so more people can find out about it by using "?". thanks! Christoph

2 1

Bgp_local_pref path depending
by mattia.milani＠studenti.unitn.it 20 Sep '19

20 Sep '19

Hello all, I’m writing this email because i was trying to create an input filter for my daemon. Protocol: BGP I would like to evaluate an input path and change the bgp preference if the path correspond to a certain path. I configured a default bgp_local_pref with the command: default bgp_local_pref 1; And in the input filter I wrote a code like: If bgp_path ~ [= * 1 2 3 =] then { bgp_local_pref = 100; } But this doesn’t seems to do the expected work, if the path finish with 1 2 3 no matter how much it is long I would like to prefer it over other paths. If anyone can suggest me how to handle it thanks, Mattia

2 2

Do you want to participate in IPv4 to IPv6 transition rather than an outage?
by Mike Mazarick 20 Sep '19

20 Sep '19

In 1998, I participated in Nortel's movement from one set of IPv4 numbers to another set of IPv4 numbers. It was disastrous - we ended up going back to the original IPv4 numbers even though there was a senior Unix admin per building (about 200 employees) on a Sunday afternoon to make this happen. It was a "bad cut-over" to borrow from Telecom vocabulary. More than 20 years have passed and the world is going to IPv6. In 1998, a network engineer told me that IPv6 was the answer to all the inherent problems with IPv4, but the world has still not migrated to IPv6. It took an economic incentive to allow the world to migrate and I would prefer that the routing be open source that controls this effort. This is "dual stack" at the device level, "dual stack on steroids", or "dual stack for less than a day". It remains the only solution that provides a customer with a pure IPv6 network and provides the necessary IPv4 network for the parts that are uneconomic to migrate to IPv6. As such, it deserves its own RFC and a separate job function is to provide the RFC to IETF. If Cisco can provide an RFC to IETF by demonstrating working code to IETF, then we can do it too. Let me know of your interest, either on this mailing list or privately. Mike Mazarick mike.mazarick(a)virtudatacenter.com 1-919-413-1274 Raleigh, NC 27607 --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

minor documentation fixes
by Christoph 20 Sep '19

20 Sep '19

Hello, (for some unknown reason I'm not getting any emails from this mailing list even though I'm subscribed, so please keep me in CC if you reply.) Here are some suggestions for minor documentation fixes (mostly typos): https://bird.network.cz/?get_doc&v=20&f=bird-3.html > You can either use a simple string starting with a letter followed by > any combination of letters and numbers (e.g. R123, myfilter, bgp5) Underscore also appears to be allowed. atribute -> attribute https://bird.network.cz/?get_doc&v=20&f=bird-5.html#ss5.2 Each variable and each value has certain type. -> Each variable and each value has a certain type. that is to prevent you from shooting in the foot -> that is to prevent you from shooting oneself in the foot .is_ip4 which returns bool -> .is_ip4 which returns a bool lclist/ -> lclist https://bird.network.cz/?get_doc&v=20&f=bird-5.html#ss5.3 which checks current route -> which checks the current route https://bird.network.cz/?get_doc&v=20&f=bird-6.html#ss6.13 current: > print "Ignore invalid ROA ", net, " for ASN ", bgp_path.last;" Not the ROA is invalid, the announcement is. Maybe use: print "Ignore RPKI INVALID announcement ", net, " for ASN ", bgp_path.last; kind regards Christoph

2 1

Re: Re: BIRD 2.0.6 and 1.6.8
by Enes Halilović 19 Sep '19

19 Sep '19

Hello, I have problem when trying to install BIRD 2.0.6 from ppa:cz.nic-labs/bird (ubuntu 18.04.2 LTS (Bionic Beaver)): I received following error: bird2 : PreDepends: init-system-helpers (>= 1.56~) but 1.51 is to be installed Regrads, Enes

2 1

Unsupported empty lists - why?
by Nico Schottelius 18 Sep '19

18 Sep '19

Hello, being a bird 1.6 user (Debian), I find myself often in the situation that I'd like to define a variable in either bird.conf or bird6.conf and have a general.conf that defines the filters used in both protocols. However if I have a variable, for instance net_prefer_provider_a = [ s.o.m.e/prefix+ ]; in bird6.conf, but not don't prefer IPv4 traffic from any network of this provider, I'd like to define net_prefer_provider_a = []; However this is not supported in bird1.6. Now I tried to get around this problem by using defined(), however this code also does not work: if defined(net_prefer_to_a) then { if net ~ net_prefer_to_a then { bgp_local_pref = pref_high; } } net_prefer_to_a is defined in IPv6, but not in IPv4. This gives the error message: /etc/bird/general.conf:128:40 net_prefer_to_a: variable expected. How do you handle default or empty values for sets of prefixes? Best, Nico -- Your Swiss, Open Source and IPv6 Virtual Machine. Now on www.datacenterlight.ch.

3 4