Re: IPv4 mapped address considered harmful

From: Anthony DeRobertis (asd@suespammers.org)
Date: 08/27/02


From: Anthony DeRobertis <asd@suespammers.org>
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
Date: 27 Aug 2002 00:18:28 -0400


On Thu, 2002-08-22 at 12:18, Jun-ichiro itojun Hagino wrote:

> This ambiguity creates chances to malicious party to trick victim nodes.
> Here are a couple of examples:

How are these any different than with IPv4? I can send bad source
addresses in IPv4 just as easily as in IPv6. IPv6 might even make it
easier to do, e.g., reverse-path filtering (less prefixes to worry
about).

Any kernel that takes a packet saying it is from the local host
off the wire is broken.

Any firewall that allows through a packet from the Internet saying
it is from the LAN is broken.






Relevant Pages

  • Re: IPv4 mapped address considered harmful
    ... >> This ambiguity creates chances to malicious party to trick victim nodes. ... >How are these any different than with IPv4? ... >Any kernel that takes a packet saying it is from the local host ...
    (Bugtraq)
  • RE: Transfer a sending packet to upper TCP/IP protocol layer in IM
    ... He's building a gateway across an IPV4 segment. ... AFAIK, all systems that support IPv6 provide this feature anyway, so that I ... the destination NIC of IPv6 packet is the same as the destination NIC of my ... was assuming that tcpip stack can rebuild the L2 header for the encapped IPv4 ...
    (microsoft.public.development.device.drivers)
  • RE: Transfer a sending packet to upper TCP/IP protocol layer in IM
    ... I suggest you look at the IPv6 gateway standards RFCs if you're interested. ... How is he going to get IPv4 address, ... the destination NIC of IPv6 packet is the same as the destination NIC of my ... was assuming that tcpip stack can rebuild the L2 header for the encapped IPv4 ...
    (microsoft.public.development.device.drivers)
  • Re: AAISP?
    ... Premium packages, and considering Max 1 Premium - depending on the ... nothing about IPv6, except that I'd end up with a /48 block if I ... I'd probably settle for setting up a PPPoE forward on my current router ... would I still be able to use the IPv4 ...
    (uk.telecom.broadband)
  • Re: Fast downloads, slow browsing
    ... That article shows you what a normal IPV4 configuration should look like. ... With Windows XP, Microsoft added IPV6, which is more complex and offers much ... Your computer, and the subnet created by the router, appears to be on ... problem was a defective modem. ...
    (microsoft.public.windowsxp.network_web)