Re: Multiple IPv6 RAs and specific routes broken?

2013-02-04 Thread Pavel Simerda
2, 2013 4:29:23 AM > Subject: Re: Multiple IPv6 RAs and specific routes broken? > > According to the IPv6 guys, the reason the kernel defaults to > max_plen=0 > is because otherwise it is too trivial to grab packets > surreptitiously > by advertising a subnet. So you should con

Re: Multiple IPv6 RAs and specific routes broken?

2013-02-01 Thread Stuart Gathman
According to the IPv6 guys, the reason the kernel defaults to max_plen=0 is because otherwise it is too trivial to grab packets surreptitiously by advertising a subnet. So you should configure this to 64 or more - but only on interfaces with trusted routers. Long ago, Nostradamus foresaw that on

Re: Multiple IPv6 RAs and specific routes broken?

2013-02-01 Thread Stuart Gathman
Long ago, Nostradamus foresaw that on 01/31/2013 01:19 PM, Pavel Simerda would write: > - Original Message - >> I have a single default router sending RAs, and another router which >> does *not* advertise a default route, but instead advertises two >> specific routes. I'm not sure whether

Re: Multiple IPv6 RAs and specific routes broken?

2013-01-31 Thread Pavel Simerda
- Original Message - > I have a single default router sending RAs, and another router which > does *not* advertise a default route, but instead advertises two > specific routes. I'm not sure whether NM or the kernel is to blame, > but > while radvdump shows both RAs arriving, the only rout

Multiple IPv6 RAs and specific routes broken?

2013-01-31 Thread Stuart D Gathman
I have a single default router sending RAs, and another router which does *not* advertise a default route, but instead advertises two specific routes. I'm not sure whether NM or the kernel is to blame, but while radvdump shows both RAs arriving, the only route installed is the default route.