[ipv6hackers] IPv6 implications on IPv4 nets: IPv6 RAs, IPv4, and VPN "evasion"

Fernando Gont fgont at si6networks.com
Mon Sep 10 22:52:11 CEST 2012


On 09/10/2012 04:07 AM, Bjoern A. Zeeb wrote:
>>> Right but unimplemented code doesn't need an RFC, it needs fixing by
>>> vendors, as it's not about a fundamental underlying problem.
>>
>> I personally think it *is* a fundamental underlying problem: the fact
>> that so far many VPNs only support IPv4, and due to the way IPv6 and
>> IPv4 interact/co-exist, traffic may leak out of the VPN.
> 
> Yeah maybe, but is it much different from not supporting SeND (or
> other ways) for example?   The technology exists, it's not used.

In the case of SEND, it's probably too complex to solve too little.

In this particular case, it looks like a simple flaw/overlook we should
be fixed.

Cheers,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492







More information about the Ipv6hackers mailing list