[as112-ops] IPv6 network block for AS112 and experiments

Nick Hilliard nick at inex.ie
Thu Jul 14 18:59:53 UTC 2011


On 14/07/2011 19:52, John van Oppen wrote:
> Whch sercurity reasons are you eluding to?    It seems most issues would
> also apply for the in-addr.arpa space as well.

For the most part, people use ptr records in an advisory capacity only.
However, A/AAAA records are generally used for actual connection attempts.
 So if AS112 were to host .local / .lan / etc, that could be used to
redirect TCP connection attempts from lan boxes to machines of the AS112
operator's choice.  This is trivial to abuse.

Nick


More information about the as112-ops mailing list