IETF Logo Mail Archive

Re: [76attendees] Rogue IPv6 RA

Rob Evans <rhe@nosc.ja.net> Mon, 09 November 2009 05:01 UTC

Return-Path: <rhe@nosc.ja.net>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4490C28C0F5 for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 21:01:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.649
X-Spam-Level:
X-Spam-Status: No, score=-1.649 tagged_above=-999 required=5 tests=[AWL=0.350, BAYES_00=-2.599, J_CHICKENPOX_57=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B5gBCPjtvIIl for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 21:01:29 -0800 (PST)
Received: from nosc.ja.net (nosc.ja.net [IPv6:2001:630:0:40::14]) by core3.amsl.com (Postfix) with ESMTP id 3FB2F28C182 for <76attendees@ietf.org>; Sun, 8 Nov 2009 21:01:27 -0800 (PST)
Received: from vpn-134.ja.net ([128.86.24.134]) by nosc.ja.net with esmtp (Exim 4.60) (envelope-from <rhe@nosc.ja.net>) id 1N7MNz-00007U-R8 for 76attendees@ietf.org; Mon, 09 Nov 2009 05:01:52 +0000
Message-ID: <4AF7A23D.60209@nosc.ja.net>
Date: Mon, 09 Nov 2009 05:01:49 +0000
From: Rob Evans <rhe@nosc.ja.net>
User-Agent: Thunderbird 2.0.0.23 (Windows/20090812)
MIME-Version: 1.0
To: 76attendees@ietf.org
References: <m24op4b94l.wl%sekiya@wide.ad.jp>
In-Reply-To: <m24op4b94l.wl%sekiya@wide.ad.jp>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Nov 2009 05:01:30 -0000

> MAC addresses of laptop which announces Rogue RA are
> 
>    00:1b:77:bc:a4:e6
>    00:21:6b:3c:8c:e2
> 
> Please STOP announcement of Rogue RA !!!

As I've just gone through this with someone that was sending RAs 
earlier, it seems as though if you've enabled internet connection 
sharing on Windows XP in the past, it may still be sending RAs even if 
ICS is disabled.

 From a command prompt:
netsh
interface ipv6
show interface level=verbose

Look through the output for "Sends Router Advertisements : Yes", and for 
those interfaces do:

set interface "Wireless Network Connection" advertise=disabled

Replace "Wireless Network Connection" with the name of the relevant 
interface.

I doubt this is persistent.

Rob

v2.23.0 | Report a Bug | By Email