Tuesday, May 8, 2012

Testing Not to do source address selection for TCP connections

Target IPv6 addresses:
2010:0002:0002:0002:FFF2:FFF2:FFF2:FFF2/64
2010:0002:0002:0002:0002:0002:0002:0002/64

FreeBSD IPv6 address:
2010:0002:0002:0002:0002:0002:0002:0003/64

No default routers.

Now, if you do "ftp 2010:0002:0002:0002:FFF2:FFF2:FFF2:FFF2" from FreeBSD, the SYN reply should come from "2010:0002:0002:0002:FFF2:FFF2:FFF2:FFF2". Not from "2010:0002:0002:0002:0002:0002:0002:0002".

If the target performs source address selection, the reply will come from the matching address "2010:0002:0002:0002:0002:0002:0002:0002" and the connection will fail.

No comments:

Post a Comment