Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-04-06 Thread Philip Homburg
>However, when a packet from an "off-link" network is employed, the >sending node has no way of knowing where to send the packet, unless it >simply swaps the src and dst mac addresses, and uses the source address >of the packet as the destination addresses. No, a node can just use the normal IP

Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-06 Thread Philip Homburg
> Good point, and probably an indication that my provider's setup is > broken. But in terms of RFC-perspective, RAs and ND are not strictly > related, I believe - for example, prefixes might have been configured > manually (?). Hmm, I forgot one case: NBMA (Non-broadcast multiple-access). A prefix

Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-05 Thread Philip Homburg
In your letter dated Wed, 4 Mar 2020 21:10:09 +0100 you wrote: >This flag was introduced in a 2008 Security Advisory, because "non-neighbors" >could abuse Neighbor Discovery to potentially cause denial-of-service situatio >ns. >In my situation it caused valid Neighbor Solicitation packets from my

Added AI_V4MAPPED and AI_ALL to getaddrinfo.c

2011-01-14 Thread Philip Homburg
Hi, I'm using FreeBSD library code for some other project and I needed AI_V4MAPPED and AI_ALL for getaddrinfo. So I wrote some code to support these features. Is anybody interested in this? I can give you patch to an older version of getaddrinfo.c. It needs some work, in particular restoring some