search for: rfc5952

...Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: antonio.ojea.garcia at gmail.com Originally reported by Lars Ekman in Kubernetes https://github.com/kubernetes/kubernetes/issues/122611 , all credit to him The rfc5952 seems to accept "embedded ipv4" addresses, and iptables accept them, however, nft does not This works ip6tables -A INPUT -s fd00::10.0.0.1/128 -j DROP This does not nft -v nftables v1.0.9 (Old Doc Yak #3) nft add table ip6 test6 nft 'add chain ip6 test6 test6 { type filter hook pr...

...host key confirmation needed 6. cancel session 7. ssh to 0:0:0:0:0:0:0:1 8. host key confirmation needed 9. cancel session Expected result is that in steps 5 and 8 no confirmation is required and ssh recognizes that the IP addresses are equivalent with the first one (per http://tools.ietf.org/html/rfc5952#section-4). Suggested solution is to canonicalize IPv6 addressees when comparing them in host key verification. This affects at least distribution 5.5p1 on Debian Squeeze and 6.1p1 built from source, but probably affects all OSes. -- You are receiving this mail because: You are watching the ass...

https://bugzilla.mindrot.org/show_bug.cgi?id=2335 Bug ID: 2335 Summary: Config parser accepts ip/port in ListenAddress and PermitOpen Product: Portable OpenSSH Version: 6.7p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: sshd