IETF Logo Mail Archive

Re: [76attendees] Rogue IPv6 RA

evyncke <evyncke@cisco.com> Mon, 09 November 2009 05:01 UTC

Return-Path: <evyncke@cisco.com>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2473428C16B for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 21:01:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.247
X-Spam-Level:
X-Spam-Status: No, score=-9.247 tagged_above=-999 required=5 tests=[AWL=0.752, BAYES_00=-2.599, J_CHICKENPOX_44=0.6, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id us2XWsfyDmuy for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 21:01:10 -0800 (PST)
Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id BE94B28C0D6 for <76attendees@ietf.org>; Sun, 8 Nov 2009 21:01:07 -0800 (PST)
Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ak0AAI4x90qQ/uCWe2dsb2JhbACbeAEBFiQGpwmWQoQ+BIFoeA
X-IronPort-AV: E=Sophos;i="4.44,705,1249257600"; d="scan'208";a="53921796"
Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 09 Nov 2009 05:01:20 +0000
Received: from xbh-ams-102.cisco.com (xbh-ams-102.cisco.com [144.254.73.132]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA951K5f017500; Mon, 9 Nov 2009 05:01:20 GMT
Received: from xmb-ams-110.cisco.com ([144.254.74.85]) by xbh-ams-102.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 06:01:20 +0100
Received: from 10.70.230.155 ([10.70.230.155]) by XMB-AMS-110.cisco.com ([144.254.74.85]) with Microsoft Exchange Server HTTP-DAV ; Mon, 9 Nov 2009 05:01:20 +0000
User-Agent: Microsoft-Entourage/12.20.0.090605
Date: Mon, 09 Nov 2009 14:01:20 +0900
From: evyncke <evyncke@cisco.com>
To: alh-ietf@tndh.net, 'Masafumi OE' <masa@fumi.org>, 'Yuji Sekiya' <sekiya@wide.ad.jp>
Message-ID: <C71DD130.21AD%evyncke@cisco.com>
Thread-Topic: [76attendees] Rogue IPv6 RA
Thread-Index: Acpg+H2rhvc2Ahr6SYeiAv5XmjTD/AAADc+gAAA+CTI=
In-Reply-To: <019c01ca60f9$0b81ce60$22856b20$@net>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-OriginalArrivalTime: 09 Nov 2009 05:01:20.0623 (UTC) FILETIME=[AD6D5FF0:01CA60F9]
Cc: 76attendees@ietf.org
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Nov 2009 05:01:11 -0000

Interesting to see ULA on WiFi indeed ;-)


On 9/11/09 13:56, "Tony Hain" <alh-ietf@tndh.net> wrote:

> As seen from Acacia West the broken machine is:
> 
> bogus RA's from Dell_cd:e2:4d (00:11:43:cd:e2:4d)
> 
> Prefix 2002:855d:13c9:9::
> Prefix fec0:0:0:9::
> 
> 
> 
>> -----Original Message-----
>> From: 76attendees-bounces@ietf.org [mailto:76attendees-
>> bounces@ietf.org] On Behalf Of Masafumi OE
>> Sent: Monday, November 09, 2009 1:53 PM
>> To: Yuji Sekiya
>> Cc: 76attendees@ietf.org
>> Subject: Re: [76attendees] Rogue IPv6 RA
>> 
>> 
>> Dear IET76 Attendees,
>> 
>> On Mon, Nov 09, 2009 at 01:43:54PM +0900,
>>  Yuji Sekiya wrote:
>> 
>>> 
>>> Dear IET76 Attendees,
>>> This is Yuji Sekiya, IETF NOC.
>>> 
>>> Someone's laptop announces Rogue IPv6 RA on
>>> SSID:ietf network.
>>> 
>>> We send fake RAs with routerlifetime=0, so your computer
>>> may not be affected, however, the Rogue RAs are still announced.
>>> 
>>> MAC addresses of laptop which announces Rogue RA are
>>> 
>>>    00:1b:77:bc:a4:e6
>> is located in CATTLEA-East.
>> 
>>>    00:21:6b:3c:8c:e2
>> is located in CATTLEA-East.
>> 
>>> Please STOP announcement of Rogue RA !!!
>>> 
>> 
>> 
>> --
>> Masafumi OE, Astronomy Data Center, NAOJ.
>> _______________________________________________
>> 76attendees mailing list
>> 76attendees@ietf.org
>> https://www.ietf.org/mailman/listinfo/76attendees
> 
> _______________________________________________
> 76attendees mailing list
> 76attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/76attendees

v2.31.3 | Report a Bug | By Email | System Status