Re: [PATCH] Setting IPv6 route advertisement accepting interfaces

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Mon, 13 Jul 2009 00:28:29 +0200
Tonnerre LOMBARD <tonnerre%netbsd.ch@localhost> wrote:

> Salut,
> 
> On Sun, Jul 12, 2009 at 05:45:11PM -0400, Steven M. Bellovin wrote:
> > This is a good step, but I think that considerably more control is
> > needed, either at this level or a level above.  I'd like to be able
> > to filter advertisements by source and prefix.  For example, if my
> > site has native IPv6, I'd like to be able to exclude 2002:xxx --
> > 6to4 -- which are sometimes emitted by personal machines that I
> > don't want to route through.  
> 
> That's well out of scope of my current works though; also, I'm
> not sure if e.g. dhclient can do something like that for IPv4
> so far.

I don't think so, but because of the ad hoc ways of getting on v6, I
think there's a more serious problem.  (Besides, system administrators
are more accustomed to looking for v4 misbehavior.  I've tried telling
the network folks on my campus that they need to be thinking about v6
log files *now*...)
> 
> (Heh, and I don't even care right now.)
>
Fair enough.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb