From mboxrd@z Thu Jan 1 00:00:00 1970 From: Fernando Gont Subject: Re: VPN traffic leaks in IPv6/IPv4 dual-stack networks/hosts Date: Wed, 28 Nov 2012 16:57:21 -0300 Message-ID: <50B66CA1.5050907@gont.com.ar> References: <50B4D43A.7030208@gont.com.ar> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: netdev To: Jan Engelhardt Return-path: Received: from web01.jbserver.net ([93.186.182.34]:53591 "EHLO web01.jbserver.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752432Ab2K1T5j (ORCPT ); Wed, 28 Nov 2012 14:57:39 -0500 In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: On 11/27/2012 01:10 PM, Jan Engelhardt wrote: >> For a project such as OpenVPN, a (portable) fix might be non-trivial. > > If the VPN server does not even advertise to-be-secured IPv6 prefixes, > any client-side fix is questionable. If the VPN is supposed to secure all traffic, and the VPN just fails to support v6, then for me, it's questionable to have your traffic leak out the VPN just because of that lack of IPv6 support. But YMMV, of couse. Cheers, -- Fernando Gont e-mail: fernando@gont.com.ar || fgont@si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1