Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Feb 2025 18:44:31 +0100
From:      Harald Eilertsen <haraldei@anduin.net>
To:        rb@gid.co.uk
Cc:        FreeBSD Java mailing list <freebsd-java@freebsd.org>
Subject:   Re: IPv6 in Java on FreeBSD
Message-ID:  <y4ex6wa7ggpivihlvokjgyteozusjrga632igrs46xumx7omfb@7mjgvczsf2j6>
In-Reply-To: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk>
References:  <rndfmkxkd6gegwcutixzdiayaqkcuoz4ssqn4zqm2jogidx3oe@xwqgvxjara2a> <AC490949-4A9C-406A-96C4-A5FF4BFA4083@gid.co.uk> <ywr3pu3reutrld46yo5mirupwbgkt432wkbvdrt5ypeyronex4@eyqqqlwmgazf> <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk>

index | next in thread | previous in thread | raw e-mail

On Wed, Feb 19, 2025 at 01:37:09PM +0000, rb@gid.co.uk wrote:
> Hi,
>
> There are also security implications to this,

What do you mean? We should not follow the net.inet6.ip6.v6only setting?

> see inet6(4).

I did. It's rather vague on the topic. Do you have any information about
any known attacks against dual-protocol sockets?

It's a bit besides the point in any case. Java provides certain
functionality to applications regarding IPv6, as defined here:
https://docs.oracle.com/javase/8/docs/technotes/guides/net/ipv6_guide/#how_ipv6_works

Changing this is not within the scope of these patches, and if at all
desireable, it will have to be a separate effort outside of any port to
a specific OS.

Take care!
Harald


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?y4ex6wa7ggpivihlvokjgyteozusjrga632igrs46xumx7omfb>