Jeff Haran wrote: [..] > Is there some twiddling down in /proc that will make it respond to IPv6 > addresses irrespective of received interface as with IPv4 addresses, or > are the protocol specs just different in this regard?
Different spec. If you want that to work, you'll have to either enable IPv6 forwarding for the interfaces involved, or easier just add the /128 to the interface you really want it to exist on. That it worked for IPv4 is IMHO still a mistake and might cause a security breach. (take two links, one in secure net, other in public net, if a host in the public one is compromised, just add a good enough route and tada connectivity works. There is a sysctl flag for this though afaik...) Greets, Jeroen
signature.asc
Description: OpenPGP digital signature
