-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hi,
recently I started logging and blocking EUI-64 addresses out of my
network. For long time now I have privacy extension enabled on all
interfaces.
But what I seen is that unbound seems to not care about privacy
extension and uses always the EUI-64 address for outbound requests.
There seems to be no way to configure unbound to not use that address
except to manually configure a outbound address via outgoing-interface.
This seems to be a special Devuan (and Debian) problem as my Gentoo box
seems to be ok.
Anybody an idea why and how to solve it?
~> grep . /proc/sys/net/ipv6/conf/*/use_tempaddr
/proc/sys/net/ipv6/conf/all/use_tempaddr:2
/proc/sys/net/ipv6/conf/default/use_tempaddr:2
/proc/sys/net/ipv6/conf/eth0/use_tempaddr:2
/proc/sys/net/ipv6/conf/lo/use_tempaddr:2
~> cat /etc/network/interfaces
...
iface eth0 inet6 auto
privext 2
...
(you can also use "pre-up /sbin/sysctl --quiet --write
net.ipv6.conf.eth0.use_tempaddr=2" instead of privext.
Currently I have no more ideas how to solve that.
Regards
Klaus
- --
Klaus Ethgen http://www.ethgen.ch/
pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <kl...@ethgen.ch>
Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C
-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1
iQGzBAEBCgAdFiEEMWF28vh4/UMJJLQEpnwKsYAZ9qwFAltEWWoACgkQpnwKsYAZ
9qw5/wwAp8QJUZBci9VFGRDvXfOOcHWOHbSAEKA4QcdOnOPQUkUxqPpz7NNq2a6V
SsZUp5GBuKWZeSStGCqqtA/VXOuVTUFbiL6N/13kBOzoGm4VTy/ig6Bjd3pZfr7Z
fHCZLJQnvFN4/nkAmF57E9U5bmP35vjPgxcYpo6yqYCHX0XNKkdl5XhUmjrDiozo
2K8Ahwb97iE4WNucgNPaA/2kyANxD8f31QwoyaL0E6iS78RzTIoqghamkGUwEVpG
y4LjcWaleENULAhrylpw2LbejQFPWfkC1y2BrPpz0atV1hVVaM+whRfjo6K/of7Z
eM8Ur6DouC0bfXgXoGLVNTMwaEPDu4L30ea29uoBaQnG6K1Ii53Z31XKOPqHlJYZ
z29wkrSUFnUpq9ty8qGuQEyAkfZ8/mlLc4CH4dg6l7t05Ifs4V/DbR+9POlaU6Bn
Vx1djV+LKq9jBspQpHMbmMdl+/vYD8jNhrcaSM2iq2hrOoQntN0NaFJA9QGHFt9a
nUhuBUIW
=kv5F
-----END PGP SIGNATURE-----
_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
