Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by simoncion on Friday September 08, 2023 @05:27PM
(#37439663)
> I'm typing this from a corporate laptop with ipv6 explicitly disabled even though my current network supports it, because the required corporate VPN doesn't support ipv6. Today.
And (today) my (mandatory) corporate VPN doesn't support ipv6, but my both laptop and the VPN work just fine when the machine has one or more IPv6 addresses.
I'm having a somewhat difficult time imagining what series of misconfigurations were required to make your corporate network fail in that way.
Anyway. I've been using IPv6 continuously (whether via Teredo, an explicitly-configured 6to4 tunnel, or native dual-stack) for (ugh) nearly twenty years. IME, it works fine, really.
And (today) my (mandatory) corporate VPN doesn't support ipv6, but my both laptop and the VPN work just fine when the machine has one or more IPv6 addresses.
I'm having a somewhat difficult time imagining what series of misconfigurations were required to make your corporate network fail in that way.
Anyway. I've been using IPv6 continuously (whether via Teredo, an explicitly-configured 6to4 tunnel, or native dual-stack) for (ugh) nearly twenty years. IME, it works fine, really.