[ipv6hackers] Strong Host Model

[Mark ZZZ Smith]

Hi,


----- Original Message -----
> From: Guillermo Lafuente Tejero <guiye1984 at hotmail.com>
> To: "ipv6hackers at lists.si6networks.com" <ipv6hackers at lists.si6networks.com>
> Cc: 
> Sent: Wednesday, 31 July 2013 12:21 AM
> Subject: [ipv6hackers] Strong Host Model
> 
> Hi 
> 
> I was wondering if someone knows how to implement the Strong Host Model in IPv6 
> in Linux systems. Linux uses the weak host model by default and there are 
> security concerns if a multihome system is in use.
> 

I haven't used it, but apparently it is now implemented in the Linux firewall - the rpfilter match:

https://bugzilla.kernel.org/show_bug.cgi?id=6998


Regards,
Mark.