Re: listening to IPv4 & 6 sockets

Theo de Raadt <[email protected]> Thu, 18 Sep 2003 12:28:18 -0600
Newsgroups gmane.os.openbsd.ipv6
Message-ID <[email protected]>
> From:           	Thorsten Glaser <[email protected]>
> > Dixitur illum [email protected] scribere...
> > >of IPv4 only. This is because on OpenBSD you can't just bind to and 
> > >listen on a IPv6 socket and get the IPv4 connections on that same 
> > >socket like other OSes can do.
> 
> > This is because itojun@ thinks it's a security problem, and
> 
> OK, but then why is it a security risk?

It causes what is called "automatic tunnels".  These are incredibly
dangerous, hence, the decision was made -- and pressure is being
applied to the IETF, to stop this ridiculous embracing of such crap
technology ideas which can (and will) result in by-passing of
firewalls.

It will never be re-enabled in OpenBSD.