Re: listening to IPv4 & 6 sockets

> From: Thorsten Glaser <tg-20037@netcologne.de>
> > Dixitur illum corya@sentex.ca scribere...
> > >of IPv4 only. This is because on OpenBSD you can't just bind to and
> > >listen on a IPv6 socket and get the IPv4 connections on that same
> > >socket like other OSes can do.
>
> > This is because itojun@ thinks it's a security problem, and
>
> OK, but then why is it a security risk?

It causes what is called "automatic tunnels". These are incredibly dangerous, hence, the decision was made -- and pressure is being applied to the IETF, to stop this ridiculous embracing of such crap technology ideas which can (and will) result in by-passing of firewalls.

It will never be re-enabled in OpenBSD. Received on Thu Sep 18 14:32:31 2003