Re: OS X Lion and IPv6

[Patrik Karlsson <patrik () cqure net>]

On Tue, Mar 27, 2012 at 1:06 AM, David Fifield <david () bamsoftware com>wrote:

> On Sun, Mar 11, 2012 at 11:33:04AM +0100, Patrik Karlsson wrote:
> > The second problem occurs when scanning "external" IPv6 addresses. What
> > happens is that I can't scan these addresses as root (this works for
> > link-local addresses though).
> > The error message I'm seeing is (nexthost: failed to determine route to
> > <ipv6 addr>). It's possible to scan the same IPv6 address as a non
> > privileged user but as root it always fails. I've tried adding a zone
> index
> > or specifying the interface with -e or forcing a TCP scan rather than a
> SYN
> > scan, but the scan always fails with the same message.
>
> There's a change this is fixed in r28340, which changed the routing loop
> for BSD. Please try it. Also, see if you can get an --iflist both before
> and after this revision and see if there are any important differences.
>
> David Fifield

This still doesn't work for me.
I have to add the scope at the end of the target ipv6 address in order for
scanning to work, even though I'm supplying the interface using the -e
argument. Also, I can't scan global ipv6 addresses as root.

//Patrik
-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/