IETF Logo Mail Archive

Re: [76attendees] Rogue IPv6 RA

Harold Huggins <admin@dslcomputer.com> Mon, 09 November 2009 12:09 UTC

Return-Path: <admin@dslcomputer.com>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 81FCE3A6A0D for <76attendees@core3.amsl.com>; Mon, 9 Nov 2009 04:09:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level:
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_44=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o7jQVxVlxG7o for <76attendees@core3.amsl.com>; Mon, 9 Nov 2009 04:09:56 -0800 (PST)
Received: from mho-01-ewr.mailhop.org (mho-01-ewr.mailhop.org [204.13.248.71]) by core3.amsl.com (Postfix) with ESMTP id 1EBD33A68B7 for <76attendees@ietf.org>; Mon, 9 Nov 2009 04:09:56 -0800 (PST)
Received: from ip-72-167-97-127.ip.secureserver.net ([72.167.97.127] helo=ms.dslcomputer.com) by mho-01-ewr.mailhop.org with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from <admin@dslcomputer.com>) id 1N7T4e-0002rF-61; Mon, 09 Nov 2009 12:10:20 +0000
Received: from localhost ([127.0.0.1] helo=ms.dslcomputer.com) by ms.dslcomputer.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from <admin@dslcomputer.com>) id 1N7T4a-0006I7-G8; Mon, 09 Nov 2009 04:10:16 -0800
X-Mail-Handler: MailHop Outbound by DynDNS
X-Originating-IP: 72.167.97.127
X-Report-Abuse-To: abuse@dyndns.com (see http://www.dyndns.com/services/mailhop/outbound_abuse.html for abuse reporting information)
X-MHO-User: U2FsdGVkX18DtcWCYyUXDK9q1b5MUQ1x23m/iAHTsvM=
MIME-Version: 1.0
Date: Mon, 09 Nov 2009 04:10:16 -0800
From: Harold Huggins <admin@dslcomputer.com>
To: Arifumi Matsumoto <arifumi@nttv6.net>
Organization: DSL Computer
In-Reply-To: <66346671-3773-4A08-94CB-7A777C105631@nttv6.net>
References: <m24op4b94l.wl%sekiya@wide.ad.jp> <66346671-3773-4A08-94CB-7A777C105631@nttv6.net>
Message-ID: <565b2488dfd8ae2b75d8ecbf5655b441@dslcomputer.com>
X-Sender: admin@dslcomputer.com
User-Agent: RoundCube Webmail/0.3-stable
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
Cc: 76attendees@ietf.org
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Nov 2009 12:09:57 -0000

Did someone download and install a netstumbler program to see if the Rogue
is passing traffic?


http://www.netstumbler.com/downloads/

On Mon, 9 Nov 2009 19:52:48 +0900, Arifumi Matsumoto <arifumi@nttv6.net>
wrote:
> Hi,
> 
> On 2009/11/09, at 13:43, Yuji Sekiya wrote:
> 
>>
>> Dear IET76 Attendees,
>> This is Yuji Sekiya, IETF NOC.
>>
>> Someone's laptop announces Rogue IPv6 RA on
>> SSID:ietf network.
>>
>> We send fake RAs with routerlifetime=0, so your computer
>> may not be affected, however, the Rogue RAs are still announced.
> 
> Is that true ?
> 
> IIRC, routerlifetime and address lifetime is not correlated.
> 
> So, that address can be used for the source address for
> outgoing sessions, right ?
> 
> You also have to deprecate the address by announcing PIO
> with preferred lifetime 0.
> 
> Regards,
> 
>>
>> MAC addresses of laptop which announces Rogue RA are
>>
>>   00:1b:77:bc:a4:e6
>>   00:21:6b:3c:8c:e2
>>
>> Please STOP announcement of Rogue RA !!!
>>
>> -- Yuji Sekiya
>>
>> _______________________________________________
>> 76attendees mailing list
>> 76attendees@ietf.org
>> https://www.ietf.org/mailman/listinfo/76attendees
> 
> _______________________________________________
> 76attendees mailing list
> 76attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/76attendees

v2.23.0 | Report a Bug | By Email