|
|
BugTraq
Bypassing ISA Server 2004 with IPv6 Apr 03 2006 03:08PM Romain Le Guen romainl com (1 replies) Re: Bypassing ISA Server 2004 with IPv6 Apr 04 2006 12:40PM 3APA3A (3APA3A SECURITY NNOV RU) (2 replies) Re: Bypassing ISA Server 2004 with IPv6 Apr 05 2006 10:12AM Christine Kronberg (seeker shalla de) (2 replies) Re: Bypassing ISA Server 2004 with IPv6 Apr 09 2006 10:44PM Thor (Hammer of God) (thor hammerofgod com) |
|
Privacy Statement |
--Wednesday, April 5, 2006, 2:12:10 PM, you wrote to bugtraq (at) securityfocus (dot) com [email concealed]:
CK> is open for any attacks as long as they are IPv6 based. If that
CK> is right, this is an extremly nasty bug. If ISA Server 2004 and
CK> Windows 2003 Basic Firewall cannot filter that stuff it should
CK> simply drop it.
You are not right.
1. IPv6 is not installed by default.
2. If IPv6 is installed, routing is not enabled by default.
3. If you install IPv6, you can be bind it to only interfaces it's
required. To prevent IPv6 (or another routable protocol, such as IPX) on
external interface you can (and you should) unbind this protocol from
interface in network connection properties. ISA is not required for this
task and is not supposed for this task.
Again: IPv4 and IPv6 are completely different network protocol and
usually require different administration tools.
P.S. offtopic is right, since Windows XP SP2 and Windows 2003 SP1 there
is a limited (in very few features) IPv6 support for Windows Firewall.
--
~/ZARAZA
http://www.security.nnov.ru/
[ reply ]