#icmpv6 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #icmpv6, aggregated by home.social.
-
Stop ICMPv6 redirect attacks with a single sysctl. Setting net.ipv6.conf.all.accept_redirects=0 drops malicious redirects at kernel level, preventing MITM on Ubuntu 22.04, Debian 12, RHEL 9. #ipv6 #icmpv6 #security-hardening
https://www.valtersit.com/vault/block-ipv6-icmpv6-redirects-on-linux-for-security-hardening-4b2950/
-
Пишем ping на Go: сможем ли составить конкуренцию стандартному ping?
Всем привет! Меня зовут Игорь Горбунов, я разрабатываю платформу базовой станции в YADRO и изучаю Golang почти год. Уже перевалил рубеж «вывести на экран сумму четных элементов среза» и захотел написать что-то более сложное. Я интересуюсь сетями, и решил посмотреть, как в Go реализуется работа с протоколами ICMP и ICMPv6. Наиболее простая задача, связанная с ними, — реализация программы ping. Она отправляет указанному узлу сети запросы ICMP типа Echo-Request и ожидает ответы типа Echo-Reply. На первый взгляд — простейшая задача, поэтому усложним ее: построим приложение, похожее на утилиту ping в UNIX-подобных системах. Под катом расскажу, как я решал задачу и с какими подводными камнями столкнулся.
-
Fact checking IPv6: on a switch without MLD snooping, all ICMPv6 multicast packets (neighbor discovery, router discovery/advertisements and so on) are sent to all ports of the switch; they are thus visible in promiscuous mode by all nodes connected to the switch. And that means that multicast in this case is not more efficient than broadcasts from the network load point of view. Or am I missing something ?
#IPv6 #MLD #ICMPv6 #multicast -
Fact checking IPv6: on a switch without MLD snooping, all ICMPv6 multicast packets (neighbor discovery, router discovery/advertisements and so on) are sent to all ports of the switch; they are thus visible in promiscuous mode by all nodes connected to the switch. And that means that multicast in this case is not more efficient than broadcasts from the network load point of view. Or am I missing something ?
#IPv6 #MLD #ICMPv6 #multicast -
Introductory post: this is my public sub-account for #IPv6 content; my main account is linked in my profile.
I support the complete roll-out of IPv6, including intermediate efforts like dual-stack support and #NAT64 #DNS64 #CLAT, with the ultimate goal of native IPv6 support in all-new deployments, using RFC standards and best practices.
I support subnets no smaller than /64 (#SLAAC), ISPs should delegate prefixes of at least /56 or /48, and #ICMPv6 should be rate-limited, never blocked.
-
Introductory post: this is my public sub-account for #IPv6 content; my main account is linked in my profile.
I support the complete roll-out of IPv6, including intermediate efforts like dual-stack support and #NAT64 #DNS64 #CLAT, with the ultimate goal of native IPv6 support in all-new deployments, using RFC standards and best practices.
I support subnets no smaller than /64 (#SLAAC), ISPs should delegate prefixes of at least /56 or /48, and #ICMPv6 should be rate-limited, never blocked.
-
