Re: CVS commit: basesrc

[itojun%iijlab.net@localhost]

>> disallow packets to malicious 6to4 prefix, based on
>> http://playground.iijlab.net/i-d/draft-itojun-ipv6-transition-abuse-00.txt
>do I understand this right?  you are preventing folks from using 6to4?

        No, what I've added are following items.  They are:
        - 6to4 address mapped from 224.0.0.0/4
        - 6to4 address mapped from 127.0.0.0/8
        - 6to4 address mapped from 0.0.0.0/32
        - 6to4 address mapped from 255.255.255.255/32
        they are pretty bogus and should not be sent to the wire from
        any of IPv6 node (127.0.0.0/8 may be okay, but looks pretty strange).

itojun


# disallow packets to malicious 6to4 prefix
route add -inet6 2002:e000:: -prefixlen 20 ::1 -reject
route add -inet6 2002:7f00:0000:: -prefixlen 24 ::1 -reject
route add -inet6 2002:0000:0000:: -prefixlen 48 ::1 -reject
route add -inet6 2002:ffff:ffff:: -prefixlen 48 ::1 -reject