diff options
| author | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2000-06-14 16:30:45 +0000 |
|---|---|---|
| committer | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2000-06-14 16:30:45 +0000 |
| commit | 3bc35fe51227abbf3c8d9e587d1c899d0b0ab712 (patch) | |
| tree | db5f286399d627f442d41bd88b718883171e737e /share | |
| parent | e43947aa2c9eaed6bc16193714c0f9616e7421fd (diff) | |
explicitly recommend listening to two sockets.
Diffstat (limited to 'share')
| -rw-r--r-- | share/man/man4/inet6.4 | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/share/man/man4/inet6.4 b/share/man/man4/inet6.4 index ca2c9c3db10..0dfbd6d3bd3 100644 --- a/share/man/man4/inet6.4 +++ b/share/man/man4/inet6.4 @@ -1,5 +1,5 @@ -.\" $OpenBSD: inet6.4,v 1.13 2000/06/14 16:09:15 itojun Exp $ -.\" $KAME: inet6.4,v 1.12 2000/06/14 15:52:25 itojun Exp $ +.\" $OpenBSD: inet6.4,v 1.14 2000/06/14 16:30:44 itojun Exp $ +.\" $KAME: inet6.4,v 1.13 2000/06/14 16:28:16 itojun Exp $ .\" .\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. .\" All rights reserved. @@ -335,6 +335,11 @@ Implemented behavior is very different across kernel to kernel. Therefore, it is unwise to rely too much upon the behavior of .Dv AF_INET6 wildcard bind socket. +It is recommended to listen to two sockets, one for +.Dv AF_INET +and another for +.Dv AF_INET6 , +when you would like to accept both IPv4 and IPv6 traffic. .Pp It should also be noted that malicious parties can take advantage of the complexity presented above, @@ -352,6 +357,9 @@ Because of the above, does not route IPv4 traffic to .Dv AF_INET6 socket. +The particular behavior in RFC2553 is intentionally omitted for security +reasons presented above. +If you need to accept both IPv4 and IPv6 traffic, listen to two sockets. .Sh SEE ALSO .Xr ioctl 2 , .Xr socket 2 , |