From nobody Thu Feb 16 09:22:43 2023 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PHTyS1sT8z3pw3q for ; Thu, 16 Feb 2023 09:23:28 +0000 (UTC) (envelope-from ruben@verweg.com) Received: from erg.verweg.com (erg.verweg.com [IPv6:2a02:898:96::5e8e:f508]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4PHTyQ6vmpz3qmv for ; Thu, 16 Feb 2023 09:23:26 +0000 (UTC) (envelope-from ruben@verweg.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=verweg.com header.s=verweg header.b=sCnWSCZl; spf=pass (mx1.freebsd.org: domain of ruben@verweg.com designates 2a02:898:96::5e8e:f508 as permitted sender) smtp.mailfrom=ruben@verweg.com; dmarc=pass (policy=reject) header.from=verweg.com DKIM-Filter: OpenDKIM Filter v2.10.3 erg.verweg.com (unknown-jobid) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verweg.com; s=verweg; t=1676539398; bh=xNQDx1R/6NXUhFSxg1H1UgzTOPLz+fdrduHK0pFB/q8=; h=From:Date:Subject:To:From; b=sCnWSCZlZ8HPbasyny6FTuRDrZHLEn9W2v6222X+VbzOAvgPx/hU/UGdHhU8qw6Cr UFWi6+2s4EWrIVg3jVDhGnG6+coBLleFwp6F/n+scVOeJUJcjfZtrk4WiWZ+YzG0ka DWxMLyIqovE72xitl8BCCINP12IorqEgC9Wtn8bYn90hWtJuNGgQv1uckVYjFMXp3T Xa/CdYeQjpdQxjxVSyqn46stKwejtm+nxC74iIbBl+a41up07lAlcFhnuiSmuNJN8E FgNPgAueWKVmu6XmaHWjroNLi3R3UnxS/LXoBHX3pkvKRdHjDRzGZynlsfl3354HT2 +d/8/Nto0MY6A== Received: from smtpclient.apple (2a10-3781-03e9.connected.by.freedominter.net [IPv6:2a10:3781:3e9:1:6159:a4bc:7c54:a0ac] (may be forged)) (authenticated bits=0) by erg.verweg.com (8.17.1/8.17.1) with ESMTPSA id 31G9NHR8044611 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Thu, 16 Feb 2023 09:23:18 GMT (envelope-from ruben@verweg.com) X-Authentication-Warning: erg.verweg.com: Host 2a10-3781-03e9.connected.by.freedominter.net [IPv6:2a10:3781:3e9:1:6159:a4bc:7c54:a0ac] (may be forged) claimed to be smtpclient.apple Content-Type: multipart/alternative; boundary=Apple-Mail-EAD92493-DD6D-481C-954E-624ED83BF1EA Content-Transfer-Encoding: 7bit From: Ruben van Staveren List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org Mime-Version: 1.0 (1.0) Date: Thu, 16 Feb 2023 10:22:43 +0100 Subject: Set net.inet6.icmp6.nodeinfo default to 0 Message-Id: <149E43A9-7C32-4DDD-AA88-6335F3DE2332@verweg.com> To: freebsd-stable@freebsd.org X-Mailer: iPad Mail (20D67) X-Spamd-Result: default: False [-1.02 / 15.00]; MIME_MA_MISSING_TEXT(2.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-0.95)[-0.947]; NEURAL_HAM_SHORT(-0.88)[-0.877]; DMARC_POLICY_ALLOW(-0.50)[verweg.com,reject]; MV_CASE(0.50)[]; R_DKIM_ALLOW(-0.20)[verweg.com:s=verweg]; R_SPF_ALLOW(-0.20)[+mx]; MIME_HTML_ONLY(0.20)[]; MIME_GOOD(-0.10)[multipart/alternative,multipart/related]; MIME_UNKNOWN(0.10)[image/x-icon]; FROM_HAS_DN(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-stable@freebsd.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MLMMJ_DEST(0.00)[freebsd-stable@freebsd.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; DKIM_TRACE(0.00)[verweg.com:+]; TO_DN_NONE(0.00)[]; HAS_XAW(0.00)[]; ARC_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8283, ipnet:2a02:898::/32, country:NL]; MIME_TRACE(0.00)[0:+,1:+,2:~,3:~]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Queue-Id: 4PHTyQ6vmpz3qmv X-Spamd-Bar: - X-ThisMailContainsUnwantedMimeParts: N --Apple-Mail-EAD92493-DD6D-481C-954E-624ED83BF1EA Content-Type: multipart/related; type="text/html"; boundary=Apple-Mail-527A9E1A-987E-4217-BBD7-FDF04B11D471 Content-Transfer-Encoding: 7bit --Apple-Mail-527A9E1A-987E-4217-BBD7-FDF04B11D471 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi list,

Given 13.2 is nearing release, would it be possible to have a look a= t 

<= div style=3D"-webkit-user-select: all; -webkit-user-drag: element; display: i= nline-block;" class=3D"apple-rich-link" draggable=3D"true" role=3D"link" dat= a-url=3D"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D257709">
257709 =E2=80=93 netinet6: Set net.inet6.icmp6.nodeinfo d= efault to 0
3D"fbsd_favicon.ico"

And harden FreeBSD=E2=80=99s de= fault IPv6 security a bit? 

Regards,
    Ruben

= --Apple-Mail-527A9E1A-987E-4217-BBD7-FDF04B11D471 Content-Type: image/x-icon; name=fbsd_favicon.ico; x-apple-part-url=286C5B7C-6617-4E70-845C-1677DB8559F7 Content-Disposition: inline; filename=fbsd_favicon.ico Content-Transfer-Encoding: base64 Content-Id: <286C5B7C-6617-4E70-845C-1677DB8559F7> AAABAAIAEBAAAAEAIABoBAAAJgAAACAgAAABACAAqBAAAI4EAAAoAAAAEAAAACAAAAABACAAAAAA AEAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAADwMCACMDAQAk AAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDAYyKyxGlykrgdMn LJrpJkKo6SBjmdQiS1ebDAoHNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLy5uQEKY7xYc z/8EEdz/AhnX/wIl6v8HQPf/G3P+/1eIxfMyMjZ3AAAAAgAAAAAAAAAAAAAAAAAAAAA5OTNrUlOs /gADwf8ADMj/ARvM/wIozf8DM9v/Azrj/wBA7v8UX/7/d5fm/zc2OHYAAAAAAAAAAAAAAAAQEAks c3Oa5wcKuP8AD8//Ah3T/wIn1P8CH7r/ARO9/wEStv8BHsT/ATHS/yhV5/+Kk8XuDw0INQAAAAAA AAAAWlpXikVHtf8ACMj/Ah7b/wIl3f8ADMT/AACS/wAAsf8AALD/AACo/wAAk/8EFan/jMn//2Fq Y5YAAAAAAAAACW9uh8USH8T/ABzd/wIp5f8BDtb/AADG/wAAoP8AAKP/AAC7/wAAuP8AAJT/AAB1 /0Z11f+PrazPAAAADgcGABdqbJ/cAh7e/wAn6f8CJOf/AADa/wAA1/8AALb/AACm/wAAof8AAK7/ AACr/wAAd/8KEpf/gpm75QgGACEEAwAXc3mo3DBn7/84dvT/AB/p/wAA5f8AAOX/AADJ/wAAuP8A AKX/AACR/wAAj/8BAX3/CAt3/258peQKCQMfAAAAB3+AlsGcv/7/2PH+/0579f8AEvL/AADy/wAA 2v8AAML/AACt/wAAmf8MC4P/JSRx/0dOiP9yeozMAAAADQAAAABWVVeB1t///+bv/v/c7f7/h6H8 /z5f/P8hNez/JiXP/ykpvv8/P7H/Jiil/xwdl/+Eh8H/XV5ajwAAAAAAAAAAFBMiU8vM5f/2+/// +fz+/+Pl/P/I2vz/ttL7/7jJ9f/Oz+//p63l/0pY9v8AAL7/Skqv/yUlL10AAAAAAAAAAAsLV6U5 PL//5OX9//7////z9v7/6PP9//Dy/P/y+v7/x8/v/7bD7v/6/P//XWfv/wcJsf8eHmGrAAAAAQAA BCQAAILnJi3V/6ay///m6+77///9/////////////////8TE8v+RmeP/4uvy++Xr//9ZX+D/AAGI 7AAABigAAAMiDQ921GRpt987RWqOJCcuTIKCgYzAwMDH2NjX39PT1+C/wMPJk5KPjC0xNkpGTWWK bHC43AsNedkAAAQmAAAAAQEBAxoBAQIWAAAAAAAAAAAFBQUAFhYWCiMjIxslJSQbGxsaCwwMCwAB AQEAAAAAAAAAARQAAAMbAAAAAvw////wD///4AP//8AD//+AAf//gAH//wAA//8AAP//AAD//wAA //+AAf//gAH//4AA//8AAP//AAD//xw4//8oAAAAIAAAAEAAAAABACAAAAAAAIAQAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAACAAAAAwAAAAMAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAgAAAAcAAAASAAAAIQAAADAAAAA7AAAAOwAAADMAAAAiAAAAEgAAAAcAAAACAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAABAAAABEAAAAvCgkDZycmKJwwMVHAMjRo3Dc8deQ9QnjlNEpx3iFJXsUZ MjegCwoIbQAAADIAAAARAAAABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAAAqFRUNeFNUYtJUWKb8SE7P/zA23P8nMNz/KTTf /ytB7P8faPj/JJb+/zOw9/87osv+PGd32BoVFIIAAAAwAAAADgAAAAEAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAQAgIAS1FRTr11eLn+MDbS/wcNzf8A Bcv/AAjS/wAPzv8AFMn/ABjg/wAc5P8CKOj/CUDu/xx7+/87u///bKzZ/1FRXcsHBQJYAAAAEwAA AAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAFQ0NCGOIiZLmW1/L /wUHtf8AALz/AAjK/wAQ0f8CFtX/AhzP/wIhzv8CJd//Airh/wIt5P8CMOj/ADHr/wRG8P8sjP3/ kbj//3+Kpe8UEg9xAAAAGAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAA4L CwhhoaGm61JVwv8AAJ3/AAW8/wEMyP8BEcj/AhbK/wIbzv8CIcj/AibO/wIq2v8DMN3/AzTh/wM6 5f8DP+r/AkDt/wBC8P8tbPL/lbj//4+Zs/QWFRFxAAAAEwAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAJAAAAR6KioeFsbsL/AACT/wEHv/8BDMb/ARHH/wIWyf8CHMz/AiDQ/wIlw/8CLM7/ AzLY/wM43P8DPuH/A0Pm/wRI6v8ETO3/BE/w/wBH5v8pYOj/orr//5CWquwIBwRWAAAADAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAwAAACVnZ2CyqKnW/wAAg/8AB8H/AQ3J/wESy/8CF87/AhzQ/wIh 0v8CJ9b/Ai7J/wMw0f8DK9L/AifK/wIjxP8CKMn/AzXX/wND4/8IT+z/DU3g/wc/2v9DZ+X/ucX+ /2Zma8UAAAAuAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAOFRUTatPT1vozM5H/AACq/wEOz/8BEs7/ AhfR/wId1P8CIdb/Aina/wIq2v8CHKv/AAil/wAAs/8AAKz/AACn/wAApP8AAKb/AAKw/wMVw/8L MsL/FULR/xI30/91h+3/wcrg/yQjIX4AAAARAAAAAAAAAAAAAAAAAAAAAQAAACWFhX/AoKDP/wAA iv8ADsj/ARPT/wIY1f8CHdj/AiPb/wIq3v8CItj/AAe+/wAAh/8AAJP/AAC5/wAAtP8AALH/AACt /wAAqP8AAKb/AACp/wAAiP8HEZ//HDvY/0h87f/N8f//hoyL0QAAADAAAAACAAAAAAAAAAAAAAAF BwcFUcfHx/I3OKL/AAWk/wETzP8CGNn/Ah3a/wIi3f8CK+H/AiDa/wACxv8AALn/AACT/wAAj/8A ALH/AAC9/wAAtv8AALP/AACu/wAAqv8AAKX/AAB//wAAgf8KErH/Uanz/7D////H2tr+FRMTZwAA AAcAAAAAAAAAAAAAAAtERD+GxMPf/wUNnP8AErn/AhnU/wIe3v8CI+D/Airk/wIl4f8AA8z/AADL /wAAwf8AAJ3/AACY/wAAm/8AALn/AAC//wAAuP8AALP/AACv/wAAqf8AAHr/AAB5/wAAh/8dPrn/ iPT//9r9//9LSUmZAAAAEQAAAAAAAAAAAAAAFnJya6iXmNX/AAes/wIZ1v8CHuD/AiPi/wIp5f8D Lef/AQvV/wAAz/8AANP/AADI/wAAp/8AAKT/AACd/wAAnv8AALn/AADA/wAAuf8AALP/AACw/wAA h/8AAG3/AACC/wAAjf9Ad9f/zf///3Z1d7wAAAAeAAAAAAAAAAAAAAAhj46Iv36B0f8ADMT/Ah7h /wIj4/8CKOb/AzDq/wIj5f8AANX/AADY/wAA2f8AAND/AACx/wAArf8AAKj/AACg/wAAnP8AAK// AAC8/wAAuv8AALT/AACg/wAAbP8AAHn/AACG/wgTpv+u4v//mp+e1wAAACwAAAABAAAAAQAAACec m5fLbXTU/wAY1v8AJ+T/ACrm/wIv6v8DNu7/ARPh/wAA3P8AAN7/AADf/wAA1/8AALz/AAC3/wAA sf8AAKr/AACh/wAAl/8AAJr/AACq/wAAtf8AALT/AACD/wAAbf8AAHz/AACJ/4Ge7f+ss6/hAAAA NgAAAAIAAAABAAAAJpqYlst5gt3/AC3d/xBM6f8VT+z/Aj3u/wI27/8ABeH/AADi/wAA5P8AAOX/ AADf/wAAxv8AAL//AAC5/wAAsP8AAKj/AACf/wAAlP8AAIr/AACO/wAAnv8AAKH/AQFw/wICbv8A AHX/aoXY/660r98AAAA0AAAAAgAAAAAAAAAfgoGBvKar7P8dX+T/X570/4u2+P9EhPb/AEPx/wAI 5v8AAOj/AADq/wAA6v8AAOj/AADS/wAAx/8AAMD/AAC3/wAArv8AAKT/AACa/wAAkf8AAIX/AAB8 /wIDfv8GB3H/DQxj/wcJcf9yjdH/oaKe0gAAACkAAAABAAAAAAAAABRnZmajzs32/1qF5/9/vvf/ 6/f+/8Xh/v88gfb/AB3s/wAI7v8AAvD/AADw/wAA7v8AAN3/AADO/wAAxv8AALz/AACy/wAAqP8A AJ7/AACU/wEBi/8EBIL/Cwt1/x0dav85OG//LzmB/5On0/95d3S2AAAAHAAAAAAAAAAAAAAACj8/ PX7Y1/H/lqju/5S19P/q9v7/8vv//6PN/P9OevX/FDr1/wAS9v8AB/b/AAL0/wEB5/8BAdT/AQHL /wAAwP8AALX/AQGr/wEBof8EBJj/CgqP/xkYhf8xMH3/QEBz/0NCbP9QW5H/usDX/09OTJQAAAAP AAAAAAAAAAAAAAADCgoISLa1xOrY3///qb31/9jj/P/r9v7/1e3+/6jI+/+Cnfr/Rm78/xU4/P8A GPf/AAvw/wgJ2/8ICM7/BwfE/wcHuf8JCa//DQ2m/xkZoP82Npj/OjqP/x0dhP88PJ//S0ui/29+ p//Cw8b4HR0cXwAAAAUAAAAAAAAAAAAAAAAAAAAie3t/t/Pz///J2Pr/09/7//b5/v/9////2ev+ /8LJ+/+nt/3/hKr+/2mN+/89Y/f/L0bq/z482P84OM//ODjH/0FBwv9YWMH/fHu+/0lMsv8HDLr/ AACe/x8flf+BgtP/rbDY/5CPicsDAwMvAAAAAQAAAAAAAAAAAAAAAAMDAhIhISF31NPi+/P4///X 4/z/8fT+///////1+///3uT9/9LP/P/AzPz/sc/8/6vM/P+jw/r/q730/7m57v+6uev/v7/q/8PC 4/9rcMn/P070/w4a6v8ABcP/AACY/zs6ov+ZmNr/Li4yjQYGBRgAAAAAAAAAAAAAAAAAAAAAAAAA GB8fSpZ/f9D/+Pj7//D1///n7f3/9ff+//H5/v/q7v3/4+H7/9Hf/P/S3/z/zt77/8Xg+//D4Pz/ zd/5/9rc9f/m5fb/oqXf/4OW7P+aq///QlH9/wAL4f8AA7r/AgOS/2Bgv/8sLF2kAAAAGwAAAAAA AAAAAAAAAAAAAAQBAQI/MzOa4A0OmP+foNj///////L1/v/v8v3/8fb+//L0/f/r7fz/2+/9/+Lt /P/s6vv/5+v7/+Ds/P/c7fz/3/D8/9vg9f+hs+//9Pr///n7///L0v//V2L4/wAH0/8AAKn/HByY /1BQqegAAAlJAAAABQAAAAAAAAAAAAAADxMTRYkXF6f/AACQ/xQbw/+2ufT///////j5/v/19/3/ +Pr+//f5/v/u+P7/7vf+//X1/f/29Pz/9vT8//b2/P//////jY7W/2B51/////////////L2///N 0///Y2vw/wQLxP8AAJP/LS2t/xwcUZYAAAASAAAAAAAAAAEAAAAmBwdzxgEClP8AA6T/BA/T/0BN 9//V2/3////+///////8/v///f////r+///4/f//+vz+//v7/v/8/P7/+/v9//Pz+v92dc3/AAes /5yt6f/7/////////+To//+wtf7/Tlbi/wEGrP8FBZP/FRV/0QAAAC0AAAABAAAABAAAB0IAAIfq AACR/woSu/9rcuz/tLv//8DR//+4yuv65OTl+P////////////////7////9//////7///39/v/g 4fb/1tf1/9DS9P+urer/xMf1/7zR6/nB0uv59vz///b3//+zt/f/MjnK/wABlf8DA4nwAAALSwAA AAMAAAAEAAAKRwABhe8SFqv/dnvn/9XY//+Rn/L7P1WXwxchNHhHR0V8oaGgxNzc3fD+/v7///// //////////////////v8///8/f///////+zs5vK3trDFWVhWfBwlNHROYI2+oq7u+djc//+QlfD/ Exew/wAAhvUAAAxOAAAAAwAAAAIAAAAjBARIqiYqmOlKT6XYJixvpwEFJGYAAAAnCAcGESMjIhYw MDAzRUVFW3R0dIiWlparqampwLe4uM25ubnNrq6swZycmq59fXyMVFRTWkNDQy4zMzMTDAwLEAAA ACUCBR5gIylpoUBFo9QaHpfpAABMswAAACoAAAACAAAAAAAAAAcAAAAcAAAANQAAAC4AAAAXAAAA CAAAAAIAAAAAAwMDABQUFAEeHh4HKioqDjMzMxk0NDQlNjY2Lzg3Ny83NzcmNjY2GjExMQ4oKCgG ISEhAAgICAAAAAAAAAAAAQAAAAcAAAAUAAAAKwAAADYAAAAgAAAACgAAAAEAAAAAAAAAAAAAAAEA AAACAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBAQADQ0NABEREQAQEBAAERERABIS EgAQEBAABgYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAgAAAAEAAAAAAAAA AP/8P///wAP//wAA//4AAD/4AAAf8AAAD+AAAAfgAAAHwAAAA8AAAAOAAAABgAAAAYAAAAGAAAAB gAAAAAAAAAAAAAAAgAAAAIAAAAGAAAABgAAAAcAAAAHAAAADwAAAA4AAAAGAAAABAAAAAAAAAAAA AAAAAAAAAIDABwDH///j --Apple-Mail-527A9E1A-987E-4217-BBD7-FDF04B11D471-- --Apple-Mail-EAD92493-DD6D-481C-954E-624ED83BF1EA--