[DragonFlyBSD - Submit #2780] (New) [PATCH] Optionally allow IPv6 ND packets from non-neighbours

[bugtracker-admin at leaf.dragonflybsd.org]

Issue #2780 has been reported by gpr.

----------------------------------------
Submit #2780: [PATCH] Optionally allow IPv6 ND packets from non-neighbours
http://bugs.dragonflybsd.org/issues/2780

* Author: gpr
* Status: New
* Priority: Normal
* Assignee: 
* Category: Networking
* Target version: 
----------------------------------------
IPv6 code discards ND packets from non-neighbours, which is believed to be correct, but breaks ND on some configurations (VULTR ipv6 for example). Hence the patch, it makes this behaviour optional (via sysctl). Default is old behaviour (discard those packets), accepting such ND packets can be insecure.
Useful links:
https://www.freebsd.org/security/advisories/FreeBSD-SA-08:10.nd6.asc
https://www.mail-archive.com/misc@openbsd.org/msg119029.html

Obtained-from: FreeBSD


---Files--------------------------------
rfc4861_no.patch (2.1 KB)


-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account