Re: [76attendees] Rogue IPv6 RA

"Tony Hain" <alh-ietf@tndh.net> Mon, 09 November 2009 05:33 UTC

Return-Path: <alh-ietf@tndh.net>
X-Original-To: 76attendees@core3.amsl.com
Delivered-To: 76attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C96443A6A83 for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 21:33:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.101
X-Spam-Level: **
X-Spam-Status: No, score=2.101 tagged_above=-999 required=5 tests=[AWL=0.481, BAYES_00=-2.599, DNS_FROM_RFC_BOGUSMX=1.482, FH_HOST_EQ_D_D_D_D=0.765, HOST_EQ_STATICB=1.372, J_CHICKENPOX_44=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e+AppLDvDA2e for <76attendees@core3.amsl.com>; Sun, 8 Nov 2009 21:33:24 -0800 (PST)
Received: from smtp.tndh.net (static-66-15-163-216.bdsl.verizon.net [66.15.163.216]) by core3.amsl.com (Postfix) with ESMTP id E66E33A68FA for <76attendees@ietf.org>; Sun, 8 Nov 2009 21:33:22 -0800 (PST)
Received: from server.tndh.net ([192.168.123.10] helo=eagle) by smtp.tndh.net with esmtp (Exim 4.68 (FreeBSD)) (envelope-from <alh-ietf@tndh.net>) id 1N7Mrc-00091x-D0; Sun, 08 Nov 2009 21:32:32 -0800
From: Tony Hain <alh-ietf@tndh.net>
To: 'evyncke' <evyncke@cisco.com>, 'Masafumi OE' <masa@fumi.org>, 'Yuji Sekiya' <sekiya@wide.ad.jp>
References: <019c01ca60f9$0b81ce60$22856b20$@net> <C71DD130.21AD%evyncke@cisco.com>
In-Reply-To: <C71DD130.21AD%evyncke@cisco.com>
Date: Mon, 09 Nov 2009 14:32:28 +0900
Message-ID: <01b201ca60fe$082c2170$18846450$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acpg+H2rhvc2Ahr6SYeiAv5XmjTD/AAADc+gAAA+CTIAARLVIA==
Content-Language: en-us
Cc: 76attendees@ietf.org
Subject: Re: [76attendees] Rogue IPv6 RA
X-BeenThere: 76attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: alh-ietf@tndh.net
List-Id: <76attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/76attendees>
List-Post: <mailto:76attendees@ietf.org>
List-Help: <mailto:76attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/76attendees>, <mailto:76attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Nov 2009 05:33:24 -0000

That is not ula, it is site-local. Both of those prefixes are in the same RA

> -----Original Message-----
> From: evyncke [mailto:evyncke@cisco.com]
> Sent: Monday, November 09, 2009 2:01 PM
> To: alh-ietf@tndh.net; 'Masafumi OE'; 'Yuji Sekiya'
> Cc: 76attendees@ietf.org
> Subject: Re: [76attendees] Rogue IPv6 RA
> 
> Interesting to see ULA on WiFi indeed ;-)
> 
> 
> On 9/11/09 13:56, "Tony Hain" <alh-ietf@tndh.net> wrote:
> 
> > As seen from Acacia West the broken machine is:
> >
> > bogus RA's from Dell_cd:e2:4d (00:11:43:cd:e2:4d)
> >
> > Prefix 2002:855d:13c9:9::
> > Prefix fec0:0:0:9::
> >
> >
> >
> >> -----Original Message-----
> >> From: 76attendees-bounces@ietf.org [mailto:76attendees-
> >> bounces@ietf.org] On Behalf Of Masafumi OE
> >> Sent: Monday, November 09, 2009 1:53 PM
> >> To: Yuji Sekiya
> >> Cc: 76attendees@ietf.org
> >> Subject: Re: [76attendees] Rogue IPv6 RA
> >>
> >>
> >> Dear IET76 Attendees,
> >>
> >> On Mon, Nov 09, 2009 at 01:43:54PM +0900,
> >>  Yuji Sekiya wrote:
> >>
> >>>
> >>> Dear IET76 Attendees,
> >>> This is Yuji Sekiya, IETF NOC.
> >>>
> >>> Someone's laptop announces Rogue IPv6 RA on
> >>> SSID:ietf network.
> >>>
> >>> We send fake RAs with routerlifetime=0, so your computer
> >>> may not be affected, however, the Rogue RAs are still announced.
> >>>
> >>> MAC addresses of laptop which announces Rogue RA are
> >>>
> >>>    00:1b:77:bc:a4:e6
> >> is located in CATTLEA-East.
> >>
> >>>    00:21:6b:3c:8c:e2
> >> is located in CATTLEA-East.
> >>
> >>> Please STOP announcement of Rogue RA !!!
> >>>
> >>
> >>
> >> --
> >> Masafumi OE, Astronomy Data Center, NAOJ.
> >> _______________________________________________
> >> 76attendees mailing list
> >> 76attendees@ietf.org
> >> https://www.ietf.org/mailman/listinfo/76attendees
> >
> > _______________________________________________
> > 76attendees mailing list
> > 76attendees@ietf.org
> > https://www.ietf.org/mailman/listinfo/76attendees