On Fri, Apr 09, 2010 at 04:14:57PM +0200, Marco d'Itri wrote: > On Apr 08, Hendrik Sattler <p...@hendrik-sattler.de> wrote: > > > I also don't really see the issues with bindv6only=0. If you listen on > > all interfaces, it makes is easier. If you only listen on specific > > interfaces, it's not in the way. > This is not true, the big problem with bindv6only=0 is that you will get > IPv4 connections mapped in IPv6 so applications need to convert the > addresses everywhere (logs, ACLs processing, etc).
They don't *need* to do that. It can just be documented that if you use IPv6, you need to use the v4-in-v6-mapped syntaxis. Granted, that's a bit ugly, but it does work. -- The biometric identification system at the gates of the CIA headquarters works because there's a guard with a large gun making sure no one is trying to fool the system. http://www.schneier.com/blog/archives/2009/01/biometrics.html -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20100411104200.gb11...@celtic.nixsys.be
