Last Modified: Jul 12, 2023
Known Affected Versions:
14.1.0, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199
Opened: Feb 10, 2019 Severity: 3-Major
If a policy has rules involving IPv6 addresses, and the addresses differ only on 32-bit boundaries, then the compilation of that policy may cause MPCD to crash.
MCPD cores, and then restarts. The policy is not usable.
-- A policy is attached to a virtual server. -- That policy contains conditions that involve IPv6 addresses. -- The addresses in different rules differ only on 32-bit boundaries.
You can try either of the following: -- It may be possible to create multiple rules from a given rule by altering the netmask. -- Another possibility is to add a placeholder rule with no action that matches IP addresses differently.
Policies involving matching IP addresses now compile correctly.