Re: [76attendees] Rogue IPv6 RA

Masafumi OE <masa@fumi.org> Tue, 10 November 2009 05:36 UTC

Return-Path: <masa@fumi.org>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E3FB83A69DC for <76attendees@core3.amsl.com>; Mon, 9 Nov 2009 21:36:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.776
X-Spam-Level:
X-Spam-Status: No, score=0.776 tagged_above=-999 required=5 tests=[AWL=0.266, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_44=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lCB+JWuxvRML for <76attendees@core3.amsl.com>; Mon, 9 Nov 2009 21:36:03 -0800 (PST)
Received: from mta.nao.ac.jp (mta1-ext.mtk.nao.ac.jp [133.40.6.5]) by core3.amsl.com (Postfix) with ESMTP id B2DCB3A69CB for <76attendees@ietf.org>; Mon, 9 Nov 2009 21:36:03 -0800 (PST)
Received: from anago.fumi.org (sslvpn-39-226.mtk.nao.ac.jp [133.40.39.226]) by mta.nao.ac.jp (Postfix) with ESMTP id AF485E6369 for <76attendees@ietf.org>; Tue, 10 Nov 2009 14:36:29 +0900 (JST)
Received: by anago.fumi.org (Postfix, from userid 1001) id 6C2EC2B455; Tue, 10 Nov 2009 14:36:24 +0900 (JST)
Date: Tue, 10 Nov 2009 14:36:24 +0900
From: Masafumi OE <masa@fumi.org>
To: 76attendees@ietf.org
Message-ID: <20091110053624.GB5468@anago.fumi.org>
References: <m24op4b94l.wl%sekiya@wide.ad.jp> <m27htz9fsq.wl%sekiya@wide.ad.jp>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <m27htz9fsq.wl%sekiya@wide.ad.jp>
User-Agent: Mutt/1.5.19 (2009-01-05)
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Nov 2009 05:36:05 -0000

Dear All,

"00:21:6b:3c:8c:e2" has been blocked from IETF76 WiFi at 2:00pm.

Please, people who owns this client contact to the Helpdesk in 
the terminal room or NOC in the UME(4th Floor).
(See the IETF message board)

Also, we are hunting another Rouge RA client on the venue.
MAC address is "00:1b:77:bc:a4:e6" in the ORCHID West.
If RA sending from this client will be continued, we will block 
the client.

Regards,

--
Masafumi OE/ NAOJ


On Tue, Nov 10, 2009 at 01:15:01PM +0900,
 Yuji Sekiya wrote:

> At Mon, 09 Nov 2009 13:43:54 +0900,
> Yuji Sekiya wrote:
> 
> Dear IETF76 participants,
> 
> In Cattleya West Root room the below client is still
> sending Rogue RA. The client also sent it yesterday.
> 
> 00:21:6b:3c:8c:e2
> 
> The machine name is "T400" by DHCP log.
> 
> We will kick out the client from wireless network
> at 2:00pm.
> 
> Please check MAC address of your PC.
> 
> Regards,
> 
> -- Yuji Sekiya
> 
> 
> 
> > Dear IET76 Attendees,
> > This is Yuji Sekiya, IETF NOC.
> > 
> > Someone's laptop announces Rogue IPv6 RA on
> > SSID:ietf network.
> > 
> > We send fake RAs with routerlifetime=0, so your computer
> > may not be affected, however, the Rogue RAs are still announced.
> > 
> > MAC addresses of laptop which announces Rogue RA are
> > 
> >    00:1b:77:bc:a4:e6
> >    00:21:6b:3c:8c:e2
> > 
> > Please STOP announcement of Rogue RA !!!
> > 
> > -- Yuji Sekiya
> > 
> > _______________________________________________
> > 76attendees mailing list
> > 76attendees@ietf.org
> > https://www.ietf.org/mailman/listinfo/76attendees
> > 
> _______________________________________________
> 76attendees mailing list
> 76attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/76attendees

-- 
Masafumi OE, Astronomy Data Center, NAOJ.