Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Dec 2020 09:53:02 -0500
From:      Mark Johnston <markj@freebsd.org>
To:        "Wall, Stephen" <stephen.wall@redcom.com>
Cc:        FreeBSD Security Advisories <security-advisories@freebsd.org>, "freebsd-security@freebsd.org" <freebsd-security@freebsd.org>
Subject:   Re: FreeBSD Security Advisory FreeBSD-SA-20:31.icmp6
Message-ID:  <X9I2TrDEO2401ciQ@raichu>
In-Reply-To: <DM6PR09MB4807C384E146DCE0C3617FC2EECC0@DM6PR09MB4807.namprd09.prod.outlook.com>
References:  <20201201204619.F3A3B19D2F@freefall.freebsd.org> <DM6PR09MB4807C384E146DCE0C3617FC2EECC0@DM6PR09MB4807.namprd09.prod.outlook.com>

index | next in thread | previous in thread | raw e-mail

On Wed, Dec 09, 2020 at 03:45:13PM +0000, Wall, Stephen wrote:
> This advisory states "Systems with IPv6 disabled are not affected."  What constitutes disabling IPv6 in this context?  Would it require disabling it when building the kernel, or is `ipv6_enable="NO"` in `rc.conf` sufficient?

The latter should be sufficient.  The kernel will drop IPv6 packets
received on an interface with the IFDISABLED flag set, and they won't
reach the affected code.


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?X9I2TrDEO2401ciQ>