netdev - Re: IPv6: proxy_ndp to a network range

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160509083903.GA2462@omega>
Date:	Mon, 9 May 2016 10:39:08 +0200
From:	Alexander Aring <alex.aring@...il.com>
To:	"H. Peter Anvin" <hpa@...or.com>
Cc:	netdev@...r.kernel.org
Subject: Re: IPv6: proxy_ndp to a network range

Hi,

On Mon, May 09, 2016 at 01:06:51AM -0700, H. Peter Anvin wrote:
> Hello,
> 
> There currently doesn't seem to be any support for proxy_ndp of a whole
> network mask, as IPv4 proxy_arp seems to permit.
> 
> a) Am I actually correct in this, or am I just missing something important?
> 
> b) Is there a technical reason for this, or is it just a limitation of the
> current implementation?
> 

So far I know you can do this with the ndppd [0] userspace tool which listen
NS/NA messages and do the ip -6 neigh add proxy for you.

- Alex

[0] https://github.com/DanielAdolfsson/ndppd