Hi,

I think that this bug (#343140) could also be a security problem.

Indeed, lots of IPv6 DNS queries related to internal hosts are then blindly
forwarded to the root servers or to bind's "forwarders". So someone on the
Internet will be able to discover your LAN hosts.

To stop this information leak there could be a few solutions:
- tell the libc6 not to try IPv6 DNS queries, or try IPv4 before IPv6
(resolv.conf option ?)
- or configure bind to filter IPv6 queries
- or finding a nice iptables rule which stops IPv6 queries.

Cheers,

  Ludovic.

-- 
http://www.palmopensource.com   - The PalmOS open source portal
http://www.drolez.com           - Personal site


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to