News for hackers. Stuff that matters.

A comment on CVE-2023-4809: FreeBSD pf bypass when using IPv6. Parent comment

Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by Macha on Friday September 08, 2023 @05:21PM (#37439599)
* SLAAC with MAC addresses -> Stable privacy addresses

* fec0:: site local addresses -> ULAs

* No DHCP handing out addresses -> DHCPv6

* "IPv4 compatible" ::<IPv4 address> -> "IPv4 mapped" ::ffff:<IPv4 address>

* 6to4 -> Just use dual stack

* ip6.int RDNS -> ip6.arpa

[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by tedunangst on Friday September 08, 2023 @05:46PM (#37439797)
RH0 was so bad it should count twice.
[ Parent | on HN ]