News for hackers. Stuff that matters.

A comment on CVE-2023-4809: FreeBSD pf bypass when using IPv6. Parent comment

Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by tedunangst on Friday September 08, 2023 @04:40PM (#37439104)
How about the fact that half the RFCs you were supposed to implement 20 years ago have been superseded by RFCs saying do not implement?
[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by ianlevesque on Friday September 08, 2023 @04:43PM (#37439153)
Not sure why you are being downvoted, if there was a pile of churn in IPv6 recommendations I'm curious about them.
[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by Macha on Friday September 08, 2023 @05:21PM (#37439599)
* SLAAC with MAC addresses -> Stable privacy addresses

* fec0:: site local addresses -> ULAs

* No DHCP handing out addresses -> DHCPv6

* "IPv4 compatible" ::<IPv4 address> -> "IPv4 mapped" ::ffff:<IPv4 address>

* 6to4 -> Just use dual stack

* ip6.int RDNS -> ip6.arpa

[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by tedunangst on Friday September 08, 2023 @05:46PM (#37439797)
RH0 was so bad it should count twice.
[ Parent | on HN ]