Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-04 Thread Dennis Kögel
Hi, I‘ve spent quite some time debugging weird intermittent IPv6 connectivity issues over the last few days. It turned out that net.inet6.icmp6.nd6_onlink_ns_rfc4861=1 fixed those problems. This flag was introduced in a 2008 Security Advisory, because "non-neighbors" could abuse Neighbor Disco

Re: Revisiting FreeBSD-SA-08:10.nd6 (or: avoiding IPv6 pain)

2020-03-04 Thread Hiroki Sato
Dennis Kögel wrote in <523ba6cf-c2c3-4e55-b81c-cb8816e56...@neveragain.de>: dk> Hi, dk> dk> I‘ve spent quite some time debugging weird intermittent IPv6 dk> connectivity issues over the last few days. dk> dk> It turned out that net.inet6.icmp6.nd6_onlink_ns_rfc4861=1 fixed those dk> problems.