Re: Exim and IPv6 Help

[Cedric Berger <cedric@wireless-networks.com>]

Theo de Raadt wrote:

> > So we are again in the area of IPv4-mapped addresses not supported under
> > OpenBSD. NetBSD has a sysctl switch to enable this if I remember your
> > previous mail right. What's wrong with this approach?
> > Listening on both AF_INET _and_ AF_INET6 moves unnessesary complexity to the
> > application while it could be handled in the kernel quite easily. Why don't
> > we just do that? Why do we break compatibility? Why do we ignore the RFCs
> > (though not Standard yet)?
>
> No, only you are questioning this.
>
> Everyone else has read the notes that itojun has posted, and
> understood that this decision has been made for safety reasons.

Theo:

Is there no middle ground between "supporting all the insecure transition RFCs", and
"supporting nothing"?

For example, what about not supporting "SIIT/RFC2765", which mean filtering IPv4
mapped on the wire, But still supporting IPv6 mapped address at the application level,
through a sysctl, allowing us to run application like the JDK?

Cedric