Dual Stack RadSec

Alan DeKok aland at deployingradius.com
Thu Nov 14 15:44:31 CET 2013


Brian Julin wrote:
> FWIW, this approach opens a bunch of (not insurmountable) security obstacles.
> 
> See draft-itojun-v6ops-v4mapped-harmful-00

  For that reason (and others) FreeRADIUS does:

	setsockopt(this->fd, IPPROTO_IPV6, IPV6_V6ONLY, ...

  v6 sockets are *only* v6.  Mixing the protocols is a bad idea.

  Alan DeKok.


More information about the Freeradius-Users mailing list