-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Open
Labels
Area: networkArea: NetworkingArea: NetworkingArea: toolsArea: Supplementary toolsArea: Supplementary toolsType: bugThe issue reports a bug / The PR fixes a bug (including spelling errors)The issue reports a bug / The PR fixes a bug (including spelling errors)
Description
Description
dist/tools/sliptty/start_network.sh
enables forwarding on all interfaces when running.
By default, Linux will ignore RAs on interfaces with forwarding enabled unless net.ipv6.conf.<interface>.accept_ra=2
. This is sensible for security on routers.
It thus ignores RAs on my uplink interface and breaks connectivity.
Interestingly, this seems to be partially acknowledged in the script, as it sets the appropriate sysctl for the tun
interface. See here
Arguably, enabling forwarding on all interfaces is very dangerous and potentially a security issue for users that are unfamiliar with Linux routing.
I am unsure of the best approach to take to fix this, as it is not clear why forwarding is activated for all interfaces!
Metadata
Metadata
Assignees
Labels
Area: networkArea: NetworkingArea: NetworkingArea: toolsArea: Supplementary toolsArea: Supplementary toolsType: bugThe issue reports a bug / The PR fixes a bug (including spelling errors)The issue reports a bug / The PR fixes a bug (including spelling errors)