Date: Thu, 10 Dec 2020 09:53:02 -0500 From: Mark Johnston <markj@freebsd.org> To: "Wall, Stephen" <stephen.wall@redcom.com> Cc: FreeBSD Security Advisories <security-advisories@freebsd.org>, "freebsd-security@freebsd.org" <freebsd-security@freebsd.org> Subject: Re: FreeBSD Security Advisory FreeBSD-SA-20:31.icmp6 Message-ID: <X9I2TrDEO2401ciQ@raichu> In-Reply-To: <DM6PR09MB4807C384E146DCE0C3617FC2EECC0@DM6PR09MB4807.namprd09.prod.outlook.com> References: <20201201204619.F3A3B19D2F@freefall.freebsd.org> <DM6PR09MB4807C384E146DCE0C3617FC2EECC0@DM6PR09MB4807.namprd09.prod.outlook.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 09, 2020 at 03:45:13PM +0000, Wall, Stephen wrote: > This advisory states "Systems with IPv6 disabled are not affected." What constitutes disabling IPv6 in this context? Would it require disabling it when building the kernel, or is `ipv6_enable="NO"` in `rc.conf` sufficient? The latter should be sufficient. The kernel will drop IPv6 packets received on an interface with the IFDISABLED flag set, and they won't reach the affected code.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?X9I2TrDEO2401ciQ>