Re: [72attendees] Rogue 6to4 RA on wireless network
Marshall Eubanks <tme@multicasttech.com> Wed, 30 July 2008 08:53 UTC
Return-Path: <72attendees-bounces@ietf.org>
X-Original-To: 72attendees-archive@ietf.org
Delivered-To: ietfarch-72attendees-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C37433A68A2; Wed, 30 Jul 2008 01:53:49 -0700 (PDT)
X-Original-To: 72attendees@core3.amsl.com
Delivered-To: 72attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 459043A6965 for <72attendees@core3.amsl.com>; Wed, 30 Jul 2008 01:53:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.549
X-Spam-Level:
X-Spam-Status: No, score=-103.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RlT-ao8Kfbzv for <72attendees@core3.amsl.com>; Wed, 30 Jul 2008 01:53:47 -0700 (PDT)
Received: from multicasttech.com (lennon.multicasttech.com [63.105.122.7]) by core3.amsl.com (Postfix) with ESMTP id 53BC03A6882 for <72attendees@ietf.org>; Wed, 30 Jul 2008 01:53:47 -0700 (PDT)
Received: from [63.105.122.7] (account marshall_eubanks HELO [IPv6:::1]) by multicasttech.com (CommuniGate Pro SMTP 3.4.8) with ESMTP-TLS id 12292192; Wed, 30 Jul 2008 04:54:01 -0400
Message-Id: <5E1EE49B-C7A0-4DC0-9035-C816714CD2B4@multicasttech.com>
From: Marshall Eubanks <tme@multicasttech.com>
To: Tim Chown <tjc@ecs.soton.ac.uk>
In-Reply-To: <20080730085121.GA2957@login.ecs.soton.ac.uk>
Mime-Version: 1.0 (Apple Message framework v926)
Date: Wed, 30 Jul 2008 04:53:58 -0400
References: <20080730085121.GA2957@login.ecs.soton.ac.uk>
X-Mailer: Apple Mail (2.926)
Cc: 72attendees@ietf.org
Subject: Re: [72attendees] Rogue 6to4 RA on wireless network
X-BeenThere: 72attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "Discussion list for the attendees of IETF 72 meeting." <72attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/72attendees>, <mailto:72attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <https://www.ietf.org/mailman/private/72attendees>
List-Post: <mailto:72attendees@ietf.org>
List-Help: <mailto:72attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/72attendees>, <mailto:72attendees-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Sender: 72attendees-bounces@ietf.org
Errors-To: 72attendees-bounces@ietf.org
On Jul 30, 2008, at 4:51 AM, Tim Chown wrote: > Hi, > > We still have a rogue RA on the wireless network today, the same one > as > yesterday. > > The Ethernet source of the RA is an Intel adapter 00:19:d2:7f:a6:52. > > The IPv6 source is fe80::6c4e:8ed1:3ad2:4cc4 which might be a Windows > Vista 'randomised' host address. > > It's advertising prefix 2002:8281:1394:9:: so has IPv4 addr > 130.129.19.148. > > It's also offering an fec0:: prefix so is probably running Windows ICS > (perhaps because the system has IPv6 on but is filtering incoming > IPv6 RAs > in the host firewall?) > > Anyone got any other clues? > > Anything the local ops guys can do? :) Figure out what room they are in and go there and try and find them. Marshall > > > Tim > _______________________________________________ > 72attendees mailing list > 72attendees@ietf.org > https://www.ietf.org/mailman/listinfo/72attendees _______________________________________________ 72attendees mailing list 72attendees@ietf.org https://www.ietf.org/mailman/listinfo/72attendees
- [72attendees] Rogue 6to4 RA on wireless network Tim Chown
- Re: [72attendees] Rogue 6to4 RA on wireless netwo… Marshall Eubanks
- Re: [72attendees] Rogue 6to4 RA on wireless netwo… Joel Jaeggli