| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Mon, 12 Dec 2011 14:23:14 +0100 From: Hadmut Danisch <hadmut@...isch.de> To: netdev@...r.kernel.org Subject: Privacy extension for unique local networks? Hi, I have a particular problem with my IPv6 home network: I need to enable auto configuration since my Router has dynamic IPv4 addresses and uses 6to4 tunneling, thus the IPv6 prefix also changes and is announced by the Router (2002:...). Works. Since several programs (including e.g. Samba) refuse to use the link local addresses (FE80:..), and I do not want to open my server ports just for any 2002:... address, I let my router announce an additional unique address (FD00:...). Works as well. I enabled the privacy extension on the interfaces because I want to avoid beeing tracked by Webservers in the Internet, since the 2002:-Adresses are derived from the MAC address. Works also. The problem: The Linux kernel's privacy mechanism assigns dynamic changing to the FD00: address range also, which does not make sense and makes my machines to use changing local addresses. Makes it difficult to assign local permissions based on IP addresses. The privacy mechanism should be restricted to public addresses (or at least there should be a separate switch to turn it on and off for unique local addresses). regards Hadmut (Please reply directly, I am not on your mailing list) -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists