[Dnsmasq-discuss] Switching from ISC dhcpd and IPv6 DNS
Bill C Riemers
briemers at redhat.com
Thu Apr 21 21:08:31 BST 2011
On 04/21/2011 03:06 PM, Freddie Witherden wrote:
> On 21/04/11 19:49, Bill C Riemers wrote:
>> Strange why would you want use_tempaddr=1? If you use_tempaddr=0,
> you addresses will be assigned based on the radvd network prefix and the
> mac address of the device. You IPv6 addresses will be the same
> everytime, unless your network prefix changes, or you change a mac
> address of a device.
>
> I consider it to be a very serious privacy concern. Advertising ones
> MAC address to the public internet makes tracing cookies look like Swiss
> Banking laws. I may well be wrong but I think that Windows may even
> enable such tempaddr mischief by default.
I guess then I don't really understand what you are trying to accomplish. One one hand you want dnsmasq to hand out host names, but on the other hand you want the IP addresses randomized... It sounds like you want your cake and eat it too.
Actually, though if I'm reading the specifications correctly it sounds like you can. In that if you are using use_tempaddr=1 it sounds like two addresses are supposed to be configured. One based on the mac address, useful for incoming connections, the other which is random used for outgoing connections. Of course the very nature of being random means you won't be able to assign a host name to the outgoing IP address, unless you setup a service to register that address. But you can assign the host names to the incoming address. So if for example you are running an NFS server, that will run on a consistent IPv6 address. Your problem is of course how do you recognize which machine the connection is coming from. Well the point of the anonymous IP address is to make just that problem difficult to solve...
Bill
More information about the Dnsmasq-discuss
mailing list