On Wed, 13 May 2015 17:16:07 +0200, Vincent Lefevre <vinc...@vinc17.net> wrote: >On 2015-05-12 22:31:43 +0200, Marc Haber wrote: >> On Tue, 12 May 2015 17:08:33 +0200, Vincent Lefevre >> <vinc...@vinc17.net> wrote: >> >On 2015-05-11 18:04:14 +0200, Marc Haber wrote: >> >> In IPv6, routers advertise prefixes. If a new prefix comes, end >> >> systems configured for SLAAC will allocate an IP address in this >> >> prefix and begin to use it. >> > >> >On this subject, end systems under Debian are configured for SLAAC >> >by default. :-( >> >> I consider that a feature. > >Well, having some of the network traffic (more precisely, connections >to machines that have an IPv6 address) re-routed to some unknown >machine on the local network is not a nice feature.
Same can be accomplished with arp spoofing or by spoofing ND. Disabling SLAAC does not improve security. otoh, it is very convenient to have new systems reachable immediately. Greetings Marc -- -------------------------------------- !! No courtesy copies, please !! ----- Marc Haber | " Questions are the | Mailadresse im Header Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/ Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834 -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1ysyrw-0000gz...@swivel.zugschlus.de
