Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-05 Thread Dennis Kögel
Am 05.03.2020 um 13:27 schrieb Philip Homburg : > In your letter dated Wed, 4 Mar 2020 21:10:09 +0100 you wrote: >> This flag was introduced in a 2008 Security Advisory, because >> "non-neighbors" >> could abuse Neighbor Discovery to potentially cause denial-of-service >> situatio >> ns. >> In m

Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-05 Thread Dennis Kögel
Am 05.03.2020 um 07:56 schrieb Hiroki Sato : > dk> I‘ve spent quite some time debugging weird intermittent IPv6 > dk> connectivity issues over the last few days. > dk> > dk> It turned out that net.inet6.icmp6.nd6_onlink_ns_rfc4861=1 fixed those > dk> problems. > > What was the problem more specif

Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-05 Thread Philip Homburg
In your letter dated Wed, 4 Mar 2020 21:10:09 +0100 you wrote: >This flag was introduced in a 2008 Security Advisory, because "non-neighbors" >could abuse Neighbor Discovery to potentially cause denial-of-service situatio >ns. >In my situation it caused valid Neighbor Solicitation packets from my