Re: turning on comcast v6

[Doug Barton <dougb () dougbarton us>]

On 01/02/2014 10:30 PM, TJ wrote:
> I'd argue that while the timing may be different, RA and DHCP attacks
> are largely the same and are simply variations on a theme.

Utter nonsense. The ability to nearly-instantly switch traffic for 
nearly-all nodes on the network is a very different thing than what a 
rogue DHCP server could do, even if you have ridiculously short lease 
times, which most don't.

Further, by far the common case is for network gear to _already_ be 
configured to avoid permitting hosts to act as DHCP servers unless they 
are supposed to be. It's rare to even find a network device that has RA 
Guard capabilities, never mind one that has them turned on.

There is simply no good reason not to include default route in the 
configuration for DHCPv6, and it's long overdue.

Doug