From nobody Wed Feb 19 17:44:31 2025 X-Original-To: freebsd-java@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YykKw1wzdz5nQRq for ; Wed, 19 Feb 2025 17:44:36 +0000 (UTC) (envelope-from haraldei@anduin.net) Received: from mail.anduin.net (mail.anduin.net [185.42.170.45]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4YykKv5zN1z3q5L for ; Wed, 19 Feb 2025 17:44:35 +0000 (UTC) (envelope-from haraldei@anduin.net) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=anduin.net; s=dkim2021; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID: Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=R91aPCjlvyEakHHQdS6oYnMljG3DJsiEApF/Z5JUDgw=; t=1739987075; x=1740851075; b=nw+E1JVCEc/LFg8D2J5/STUNtHi+Gfctguzdvl6A7n0eLeC9hCq3pDq7Q44sX2XxOGJWpm7X74h Zolx68AI3vDzIh6ziptHCEOrugYT67gGWm+/zYDlNEqojwLBCvsaxTvbA9ovILZs8+NAtIyJDHpf+ xHRdTzmRLqfO+VDC0fr5Ljmihz/5tPi6YpHwZQSAxgeupzyO7yqDFn1+KsI+YJBUX+6W08rg2Mvjp NwyPUQFlMnCC2PForAT/EqhEpmkefxwpXs0UpZsKWaHJwySYIvIT3+oFyqboyxQvCWufyo3L68AhA asudWKa22KMwZe7qShbC2gUK6iuQi14737hg==; Received: by mail.anduin.net with esmtpsa (TLS1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.97.1 (FreeBSD)) (envelope-from ) id 1tko7b-00000000Dvi-3T8K; Wed, 19 Feb 2025 17:44:33 +0000 Date: Wed, 19 Feb 2025 18:44:31 +0100 From: Harald Eilertsen To: rb@gid.co.uk Cc: FreeBSD Java mailing list Subject: Re: IPv6 in Java on FreeBSD Message-ID: Mail-Followup-To: rb@gid.co.uk, FreeBSD Java mailing list References: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> List-Id: Porting Java to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-java List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-java@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <79B052D3-8A9F-4658-AD33-EDD26BBB1A34@gid.co.uk> X-SA-Authenticated: Yes X-Spam-Score: -1.9 X-Spam-Level: - X-Spam-Report: host: mail.modirum.com | contact: hostmaster@modirum.com | scores: BAYES_00=-1.9,NO_RELAYS=-0.001 | autolearn=no autolearn_force=no, score=0 X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:62248, ipnet:185.42.170.0/24, country:EE] X-Rspamd-Queue-Id: 4YykKv5zN1z3q5L X-Spamd-Bar: ---- On Wed, Feb 19, 2025 at 01:37:09PM +0000, rb@gid.co.uk wrote: > Hi, > > There are also security implications to this, What do you mean? We should not follow the net.inet6.ip6.v6only setting? > see inet6(4). I did. It's rather vague on the topic. Do you have any information about any known attacks against dual-protocol sockets? It's a bit besides the point in any case. Java provides certain functionality to applications regarding IPv6, as defined here: https://docs.oracle.com/javase/8/docs/technotes/guides/net/ipv6_guide/#how_ipv6_works Changing this is not within the scope of these patches, and if at all desireable, it will have to be a separate effort outside of any port to a specific OS. Take care! Harald