-
Notifications
You must be signed in to change notification settings - Fork 2.1k
dist/tools/sliptty/start_network.sh: IPv6 connectivity is broken on PC #14689
Copy link
Copy link
Open
Labels
Area: networkArea: NetworkingArea: NetworkingArea: toolsArea: Supplementary toolsArea: Supplementary toolsType: bugThe issue reports a bug / The PR fixes a bug (including spelling errors)The issue reports a bug / The PR fixes a bug (including spelling errors)
Description
Description
dist/tools/sliptty/start_network.sh enables forwarding on all interfaces when running.
By default, Linux will ignore RAs on interfaces with forwarding enabled unless net.ipv6.conf.<interface>.accept_ra=2. This is sensible for security on routers.
It thus ignores RAs on my uplink interface and breaks connectivity.
Interestingly, this seems to be partially acknowledged in the script, as it sets the appropriate sysctl for the tun interface. See here
Arguably, enabling forwarding on all interfaces is very dangerous and potentially a security issue for users that are unfamiliar with Linux routing.
I am unsure of the best approach to take to fix this, as it is not clear why forwarding is activated for all interfaces!
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Area: networkArea: NetworkingArea: NetworkingArea: toolsArea: Supplementary toolsArea: Supplementary toolsType: bugThe issue reports a bug / The PR fixes a bug (including spelling errors)The issue reports a bug / The PR fixes a bug (including spelling errors)