Re: listening to IPv4 & 6 sockets
Theo de Raadt <[email protected]> Thu, 18 Sep 2003 12:28:18 -0600
| Newsgroups | gmane.os.openbsd.ipv6 |
|---|---|
| Message-ID | <[email protected]> |
> From: Thorsten Glaser <[email protected]> > > Dixitur illum [email protected] scribere... > > >of IPv4 only. This is because on OpenBSD you can't just bind to and > > >listen on a IPv6 socket and get the IPv4 connections on that same > > >socket like other OSes can do. > > > This is because itojun@ thinks it's a security problem, and > > OK, but then why is it a security risk? It causes what is called "automatic tunnels". These are incredibly dangerous, hence, the decision was made -- and pressure is being applied to the IETF, to stop this ridiculous embracing of such crap technology ideas which can (and will) result in by-passing of firewalls. It will never be re-enabled in OpenBSD.