> Routers must not react on router advertisements (written in someone RFC)
> or you have a security problem.

When IPv6 routing is enabled (net.ipv6.conf.*.forwarding),
autoconfiguration is automatically prevented due to that RFC,
regardless of the net.ipv6.conf.*.autoconf value.

OpenWrt should be configured as an IPv6 router by default, as per the
way it's configured as an IPv4 router by default (IPv4 forwarding is
enabled by default in /etc/sysctl.conf - net.ipv4.ip_forward=1).

Therefore I believe that the /etc/sysctl.conf file should have
net.ipv6.conf.all.forwarding=1 set by default.

Right now it's in the file but commented out (since r12351).  Does
anyone know if having it in there by default causes any errors if
kmod-ipv6 isn't installed?

If someone decides not to use their device as a router, all they would
need to do is modify the /etc/sysctl.conf file to disable IPv6
forwarding, and autoconfiguration would spring back to life.

Regards,

Andrew (abyrne)
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Reply via email to