nanog mailing list archives

Re: IOS 12.3(x) Strange service ports open on router


From: "Christopher L. Morrow" <christopher.morrow () mci com>
Date: Fri, 9 Apr 2004 21:52:40 +0000 (GMT)


On Fri, 9 Apr 2004, Iljitsch van Beijnum wrote:


On 9-apr-04, at 22:27, Pekka Savola wrote:

Another pet peeve of roughly the same category: when you enable IPv6,
telnet is automatically open to the world (using v6), even if you have
disabled v4 telnet with an access-list.

The vendor refused to believe this is a problem,

Whether or not this is a problem is in the eye of the beholder, but
from what I've seen, this is standard practice with any kind of packet
filter. As far as I know, only hosts.allow-style tcp wrapping is
agnostic about the IP version.

So, with a cisco style vty acl how does one do both v4 and v6 filterage?
(not speaking as a v6 user)


Current thread: