IETF Logo Mail Archive

Re: [76attendees] Rogue IPv6 RA

"Tony Hain" <alh-ietf@tndh.net> Mon, 09 November 2009 04:57 UTC

Return-Path: <alh-ietf@tndh.net>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 985AC3A6932 for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 20:57:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.715
X-Spam-Level: **
X-Spam-Status: No, score=2.715 tagged_above=-999 required=5 tests=[AWL=-0.395, BAYES_05=-1.11, DNS_FROM_RFC_BOGUSMX=1.482, FH_HOST_EQ_D_D_D_D=0.765, HOST_EQ_STATICB=1.372, J_CHICKENPOX_44=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4gruDTdakt5b for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 20:57:40 -0800 (PST)
Received: from smtp.tndh.net (static-66-15-163-216.bdsl.verizon.net [66.15.163.216]) by core3.amsl.com (Postfix) with ESMTP id BF6FD3A690F for <76attendees@ietf.org>; Sun, 8 Nov 2009 20:57:40 -0800 (PST)
Received: from server.tndh.net ([192.168.123.10] helo=eagle) by smtp.tndh.net with esmtp (Exim 4.68 (FreeBSD)) (envelope-from <alh-ietf@tndh.net>) id 1N7MJ4-0008x3-90; Sun, 08 Nov 2009 20:56:49 -0800
From: Tony Hain <alh-ietf@tndh.net>
To: 'Masafumi OE' <masa@fumi.org>, 'Yuji Sekiya' <sekiya@wide.ad.jp>
References: <m24op4b94l.wl%sekiya@wide.ad.jp> <20091109045240.GI9355@anago.fumi.org>
In-Reply-To: <20091109045240.GI9355@anago.fumi.org>
Date: Mon, 09 Nov 2009 13:56:47 +0900
Message-ID: <019c01ca60f9$0b81ce60$22856b20$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acpg+H2rhvc2Ahr6SYeiAv5XmjTD/AAADc+g
Content-Language: en-us
Cc: 76attendees@ietf.org
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: alh-ietf@tndh.net
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Nov 2009 04:57:41 -0000

As seen from Acacia West the broken machine is:

bogus RA's from Dell_cd:e2:4d (00:11:43:cd:e2:4d)

Prefix 2002:855d:13c9:9::
Prefix fec0:0:0:9::



> -----Original Message-----
> From: 76attendees-bounces@ietf.org [mailto:76attendees-
> bounces@ietf.org] On Behalf Of Masafumi OE
> Sent: Monday, November 09, 2009 1:53 PM
> To: Yuji Sekiya
> Cc: 76attendees@ietf.org
> Subject: Re: [76attendees] Rogue IPv6 RA
> 
> 
> Dear IET76 Attendees,
> 
> On Mon, Nov 09, 2009 at 01:43:54PM +0900,
>  Yuji Sekiya wrote:
> 
> >
> > Dear IET76 Attendees,
> > This is Yuji Sekiya, IETF NOC.
> >
> > Someone's laptop announces Rogue IPv6 RA on
> > SSID:ietf network.
> >
> > We send fake RAs with routerlifetime=0, so your computer
> > may not be affected, however, the Rogue RAs are still announced.
> >
> > MAC addresses of laptop which announces Rogue RA are
> >
> >    00:1b:77:bc:a4:e6
> 	is located in CATTLEA-East.
> 
> >    00:21:6b:3c:8c:e2
> 	is located in CATTLEA-East.
> 
> > Please STOP announcement of Rogue RA !!!
> >
> 
> 
> --
> Masafumi OE, Astronomy Data Center, NAOJ.
> _______________________________________________
> 76attendees mailing list
> 76attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/76attendees

v2.29.0 | Report a Bug | By Email | System Status