Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Feb 2001 18:01:00 -0700 (MST)
From:      "Geoffrey T. Falk" <gtf@cirp.org>
To:        security@freebsd.org
Subject:   IPv6 risk with ssh?
Message-ID:  <200102210101.SAA38561@h-209-91-79-2.gen.cadvision.com>

next in thread | raw e-mail | index | archive | help
From time to time I've noticed sshd on "tcp46" listening right now on
one of my servers (4.1.1-RELEASE). I don't see it always.


# netstat -an
[...]
tcp4       0      0  *.22                   *.*                    LISTEN
tcp46      0      0  *.22                   *.*                    LISTEN



What is tcp46, a hybrid IP4/IP6 protocol? Should I be concerned? Nobody
else has (legitimate) access to this box.

I'd prefer to disable/block all IPv6 for now if possible. How can
I be assured that this is the case? I am currently running ipfw with
a default deny rule.

I don't have a way to probe the box using IPv6 currently.

Thanks
Geoffrey



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200102210101.SAA38561>