-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

Am Sa den 26. Apr 2014 um 14:59 schrieb Philipp Kern:
> >    ~> mtr -4 www.heise.de
> >                                             My traceroute  [v0.85]
> >    ikki (0.0.0.0)                                                           
> >               Mon Dec  9 22:12:29 2013
> >    Unable to allocate IPv6 socket for nameserver communication: Address 
> > family not supported by protocol
> >                                                                       
> > Packets               Pings
> > 
> > Version 0.82-3 was working properly.
> > 
> > I suppose this is a regression introduced for bug #528992.
> > 
> > This bug makes the package in fact unusable.
> > 
> > For the records, I have no kernel on production systems that have IPv6
> > enabled or that is explicit disabled by kernel command line.
> 
> Such a configuration that diverges from the Debian default config makes
> this hardly grave or RC.

Well, you can easily boot your debian kernel with ipv6.disable=1 to
archive the same result. But the severity is ok with me.

> It's enough to have it enabled in the kernel but no addresses
> configured.

And exactly that is the problem with IPv6. Due the dynamic nature of
IPv6, you might be reachable from the net by accident if you have IPv6
enabled. If you don't use it and don't address it security wise the same
that you do IPv4, you will be screwed. And let me note that most people
have good firewall for IPv4 but none for IPv6, simply for the reason
they do not have it on there radar.

Thats the reason why I have IPv6 switched of completely on most of my
devices (except some experimental where I want to play with IPv6 that is
fare from good enough to use in productive environment).

And even more, it is good security praxis to have unused stuff at least
switched of or better not even installed or compiled in. So, I believe
that this bug even affect many people that uses mtr on debian; at least
that ones who care about secure systems.

Regards
   Klaus
- -- 
Klaus Ethgen                              http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16   Klaus Ethgen <kl...@ethgen.de>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQGcBAEBCgAGBQJTXKwSAAoJEKZ8CrGAGfasmLUMAMMsoYGIaOQZCqxsEM2X7HvE
SESgT5SNLVAgxdH4gYIN5trpGeRL6hocV8TypYUDX88GOKnznVGJKfWQSPqwwtw9
aegbSK1ir1Th9ZxqFy3jUsDyCwnB/rtMizhA4jRmp37p2MppjF25U3QQi6SqWPmg
xgSfuDzxJ2beoOqactR17kqc5FfcDo+R1ccN0fjgdMlniSU1fKiUqmw/xoXemY+T
hw8lJ+DNqXaMmQpiA7rNh5TgpBOD7BRg9vq2+/2v1Lue8aaVo5f4Pknv4z/xqzjU
ijUiJ/YW/apK7TeACZU9/cSqAKM5jFV1IrJSLiC45bSv6IIQOy3U8tXqFMEv3cFB
gLW1eMeowlSnba2PdNlRRMBg2Edk7KwzXIB7Ar58lB7mJ8FpImtXE2fefJcxtpBB
81eGfN4Fdi6navK/YbGtsBqj+zxKnfrnRdTdqvgHEk2pQCO5qc8Y7tzH4MQg2z/g
A6HkjRWMZNXzHlvpJuGJNyb0UGnrOL13QbwZxWdJ8Q==
=7S56
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to