tag:blogger.com,1999:blog-3993498847203183398.post2247454481851067497..comments2024-03-29T11:00:39.953+00:00Comments on RevK<sup>®</sup>'s ramblings: Broken IPv6RevKhttp://www.blogger.com/profile/12369263214193333422noreply@blogger.comBlogger9125tag:blogger.com,1999:blog-3993498847203183398.post-33884510379160059312010-10-26T03:25:24.360+01:002010-10-26T03:25:24.360+01:00Did you know you can IPv6ify your blog?:
http://go...Did you know you can IPv6ify your blog?:<br />http://googleappengine.blogspot.com/2010/07/app-engine-and-ipv6-round-2.htmlPaulhttps://www.blogger.com/profile/11406626762122691011noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-26032210638214250962010-10-25T22:48:14.483+01:002010-10-25T22:48:14.483+01:00Same issues as rouge DHCP servers and ARP spoofing...Same issues as rouge DHCP servers and ARP spoofing.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-28643569725516170412010-10-25T22:34:47.120+01:002010-10-25T22:34:47.120+01:00No worse than any other public WiFi network - with...No worse than any other public WiFi network - with ARP poisoning you can easily achieve an identical effect with IPv4, not to mention simply sniffing the traffic straight off the air in the case of wifi...Alexhttps://www.blogger.com/profile/08491808572691231544noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-39809335707020258222010-10-25T11:36:01.374+01:002010-10-25T11:36:01.374+01:00This is actually a bit nasty security-wise, isn...This is actually a bit nasty security-wise, isn't it? What is to stop someone advertising their own IPv6 gateway based on their DHCP-assigned address, and actually routing the traffic? Other users of the WLAN would get what appears to be an enhanced service ('it does IPv6 now') but their traffic would be getting read by a third party.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-12952797883368775932010-10-24T22:23:21.434+01:002010-10-24T22:23:21.434+01:00I never figured it out, but supposedly there is so...I never figured it out, but supposedly there is some weird combination of options under Windows Vista that will make it an rogue advertising zombie.<br /><br />I see that on other networks frequently and those hosts always seem to run Windows. For hints on how to deal with roue RAs: <a href="http://ipv6hawaii.org/?p=143" rel="nofollow">article by IPv6 Task Force Hawaii</a>Thomashttps://www.blogger.com/profile/16653854928664994957noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-16730937252986768262010-10-24T19:40:49.211+01:002010-10-24T19:40:49.211+01:00Yeh, I wonder. You would expect to see the filter ...Yeh, I wonder. You would expect to see the filter broadcast user to user traffic or something.<br /><br />Of course they have not replied to either of my complaints!RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-30673734432274817332010-10-24T17:56:04.259+01:002010-10-24T17:56:04.259+01:00Hmm, are there any distros that will do IPv6 RA &#...Hmm, are there any distros that will do IPv6 RA 'out the box' for some mad reason, as that could obviously cause chaos on a wider scale (imagine what would have happened if e.g. Windows XP ran a DHCP server by default). If not, then I wonder what on earth someone has set up and why - something attempting to do a 6-4 gateway perhaps?Alexhttps://www.blogger.com/profile/08491808572691231544noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-85040887602858551262010-10-24T16:37:01.443+01:002010-10-24T16:37:01.443+01:00I am actually thinking it may be some other device...I am actually thinking it may be some other device on the WiFi doing RA based on its DHCP allocated address. Which would be why it cant route.<br /><br />That's an interesting problem. Not specially new to IPv6 as the same could be done by adding a DHCP server to the LAN. Only two DHCP servers would be more obvious.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-66129212346651679692010-10-24T11:32:23.981+01:002010-10-24T11:32:23.981+01:00I'm guessing they don't actually know thei...I'm guessing they don't actually know their router is dishing out IPv6 addresses, I'm also guessing the company who installed the WIFI doesn't know the router is dishing out IPv6 addresses!Kevinhttps://www.blogger.com/profile/15201880320983259910noreply@blogger.com