News for hackers. Stuff that matters.

A comment on CVE-2023-4809: FreeBSD pf bypass when using IPv6. Parent comment

Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by whatwhaaaaat on Friday September 08, 2023 @06:11PM (#37439990)
It’s a bit odd to leave out the most exposed component of your residential lan when discussing its simplicity. Are you expecting never to touch the external interface of your residential lan?

Then you are reading the “rfcs” wrong.

What you really want to put in to your search engine is “does slacc do prefix delegation”.

[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by simoncion on Friday September 08, 2023 @06:33PM (#37440154)
> What you really want to put in to your search engine is “does slacc do prefix delegation”.

As I said:

> ... you just won't get [to] split that into subnets that your router delegates to the LAN side of things.

[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by whatwhaaaaat on Friday September 08, 2023 @09:43PM (#37441363)
prefix delegation is more than just splitting a larger prefix into smaller prefixes Have a nice night!
[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by simoncion on Saturday September 09, 2023 @05:31AM (#37443610)
kek
[ Parent | on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6 by whatwhaaaaat on Saturday September 09, 2023 @09:26AM (#37445124)
I would be embarrassed too if I was trying to act like slacc can hand out a 64 so I understand why you are defensive
[ Parent | on HN ]