Re: [76attendees] Rogue IPv6 RA

Yuji Sekiya <sekiya@wide.ad.jp> Tue, 10 November 2009 04:14 UTC

Return-Path: <sekiya@wide.ad.jp>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B7DA3A67BD for <76attendees@core3.amsl.com>; Mon, 9 Nov 2009 20:14:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.397
X-Spam-Level: **
X-Spam-Status: No, score=2.397 tagged_above=-999 required=5 tests=[AWL=-0.180, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_44=0.6, RCVD_NUMERIC_HELO=2.067]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 40cCXZz48otD for <76attendees@core3.amsl.com>; Mon, 9 Nov 2009 20:14:39 -0800 (PST)
Received: from azusa.nc.u-tokyo.ac.jp (azusa.nc.u-tokyo.ac.jp [130.69.251.120]) by core3.amsl.com (Postfix) with ESMTP id 10E073A67DF for <76attendees@ietf.org>; Mon, 9 Nov 2009 20:14:35 -0800 (PST)
Received: from 59.214.180.203.d.iijmobile.jp.wide.ad.jp (host-24-21.meeting.ietf.org [133.93.24.21]) by azusa.nc.u-tokyo.ac.jp (Postfix) with ESMTP id 889358280AE for <76attendees@ietf.org>; Tue, 10 Nov 2009 13:15:01 +0900 (JST)
Date: Tue, 10 Nov 2009 13:15:01 +0900
Message-ID: <m27htz9fsq.wl%sekiya@wide.ad.jp>
From: Yuji Sekiya <sekiya@wide.ad.jp>
To: 76attendees@ietf.org
In-Reply-To: <m24op4b94l.wl%sekiya@wide.ad.jp>
References: <m24op4b94l.wl%sekiya@wide.ad.jp>
User-Agent: Wanderlust/2.15.5 (Almost Unreal) SEMI/1.14.6 (Maruoka) FLIM/1.14.9 (Gojō) APEL/10.7 Emacs/22.2.50 (i386-apple-darwin9.4.0) MULE/5.0 (SAKAKI)
Organization: The University of Tokyo
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset="US-ASCII"
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Nov 2009 04:14:40 -0000

At Mon, 09 Nov 2009 13:43:54 +0900,
Yuji Sekiya wrote:

Dear IETF76 participants,

In Cattleya West Root room the below client is still
sending Rogue RA. The client also sent it yesterday.

00:21:6b:3c:8c:e2

The machine name is "T400" by DHCP log.

We will kick out the client from wireless network
at 2:00pm.

Please check MAC address of your PC.

Regards,

-- Yuji Sekiya



> Dear IET76 Attendees,
> This is Yuji Sekiya, IETF NOC.
> 
> Someone's laptop announces Rogue IPv6 RA on
> SSID:ietf network.
> 
> We send fake RAs with routerlifetime=0, so your computer
> may not be affected, however, the Rogue RAs are still announced.
> 
> MAC addresses of laptop which announces Rogue RA are
> 
>    00:1b:77:bc:a4:e6
>    00:21:6b:3c:8c:e2
> 
> Please STOP announcement of Rogue RA !!!
> 
> -- Yuji Sekiya
> 
> _______________________________________________
> 76attendees mailing list
> 76attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/76attendees
>