News for hackers. Stuff that matters.

A comment on Router Security. Parent comment

Re:Router Security by Avamander on Saturday July 30, 2022 @11:57AM (#32287770)
> This does not exist/work in IPv6.

Well obviously, but a proper switch, instead of DHCP snooping, has SLAAC and DHCPv6 snooping.

[ Parent | on HN ]
Re:Router Security by njibhu on Saturday July 30, 2022 @01:29PM (#32288572)
A lot of devices (android/windows) simply don't support DHCPv6. And SLAAC's RA delegates the responsibility of the IP to the device itself, so doing something like DHCP snooping is simply not possible because the RA packet doesn't tell the switch which IP belongs to which device.

SLAAC-snooping protects against ARP poisonning, not against ARP table overflow.

[ Parent | on HN ]
Re:Router Security by Avamander on Sunday July 31, 2022 @07:51AM (#32294932)
If it doesn't protect against ARP table overflow then that is again a missing feature in that software. Just like it's not IPv4's fault if there are no protections against someone sending a thousand DHCP requests and depleting the pool or filling some tables.
[ Parent | on HN ]