netdev - Re: IPv6: proxy_ndp to a network range

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <A2319CD4-6907-4B21-A4DD-03CCA38328FA@zytor.com>
Date:	Mon, 09 May 2016 01:46:13 -0700
From:	"H. Peter Anvin" <hpa@...or.com>
To:	Alexander Aring <alex.aring@...il.com>
CC:	netdev@...r.kernel.org
Subject: Re: IPv6: proxy_ndp to a network range

On May 9, 2016 1:39:08 AM PDT, Alexander Aring <alex.aring@...il.com> wrote:
>Hi,
>
>On Mon, May 09, 2016 at 01:06:51AM -0700, H. Peter Anvin wrote:
>> Hello,
>> 
>> There currently doesn't seem to be any support for proxy_ndp of a
>whole
>> network mask, as IPv4 proxy_arp seems to permit.
>> 
>> a) Am I actually correct in this, or am I just missing something
>important?
>> 
>> b) Is there a technical reason for this, or is it just a limitation
>of the
>> current implementation?
>> 
>
>So far I know you can do this with the ndppd [0] userspace tool which
>listen
>NS/NA messages and do the ip -6 neigh add proxy for you.
>
>- Alex
>
>[0] https://github.com/DanielAdolfsson/ndppd

Sure, but it seems like a workaround for something that ought to be simpler?
-- 
Sent from my Android device with K-9 Mail. Please excuse brevity and formatting.