On Wed, 2015-05-13 at 17:16 +0200, Vincent Lefevre wrote: > Well, having some of the network traffic (more precisely, connections > to machines that have an IPv6 address) re-routed to some unknown > machine on the local network is not a nice feature. > > IMHO, such a feature should be enabled only by the network management > system, not by default at the kernel level. Now I've looked up what Marc is referring to in an earlier reply, SLAAC and DHCP look pretty similar to me. Both have the "re-route your NIC to some unknown machine" feature. I'm sure everybody here will be the victim of a rouge router sending NDP responses, just as everybody has already been the victim of a rouge DHCP server. Not having the "automatically make my NIC usable on bootup" feature enabled by default would seem like a major omission to me. The one difference between the two right now is dhclient make it easy for the client to watch for changes using scripts. AFAICT, there is no off the shelf way of doing it for SLAAC. It's easy enough to do - just have a daemon listen to kernel netlink messages and fire off a script. The right place to put that now would be in systemd, but if they are opposed to scripts as Marc says that ain't going to happen. Sigh.
Attachment:
signature.asc
Description: This is a digitally signed message part