Penned by Patrik Lundin on 20130507 16:02.25, we have: | On Tue, May 07, 2013 at 09:16:25PM +0200, Stefan Bagdohn wrote: | > Wasn't this check introduced as mitigation of CVE-2008-2476 five years ago? | > E.g. http://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/001_ndp.patch | > | | Maby something along the lines of the 'nd6_onlink_ns_rfc4861' sysctl | flag mentioned at | http://www.freebsd.org/security/advisories/FreeBSD-SA-08:10.nd6.asc | could be used for the odd cases where it's needed? | | Regards, | Patrik Lundin
This makes the most sense to me. Otherwise, someone should fix their broken router. -- Todd Fries .. t...@fries.net ____________________________________________ | \ 1.636.410.0632 (voice) | Free Daemon Consulting, LLC \ 1.405.227.9094 (voice) | http://FreeDaemonConsulting.com \ 1.866.792.3418 (FAX) | PO Box 16169, Oklahoma City, OK 73113 \ sip:freedae...@ekiga.net | "..in support of free software solutions." \ sip:4052279...@ekiga.net \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ 37E7 D3EB 74D0 8D66 A68D B866 0326 204E 3F42 004A http://todd.fries.net/pgp.txt