[Bug 239890] java/openjdk11: openjdk 11.0.4+11.2 JDBC connections fail with IPv6 addresses

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 03 May 2023 10:46:19 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=239890

Lapo Luchini <lapo@lapo.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |lapo@lapo.it

--- Comment #8 from Lapo Luchini <lapo@lapo.it> ---
Seems like this is the only way to have it work with both IPv4 and IPv6 at the
same time.

  sudo sysctl net.inet6.ip6.v6only=0

It also seems the correct value anyways, but this is just me.

AFAIK (but I'd like more comments on that) this parameter is only safe if this
is added to pf.conf:

  table <v4mapped> const {0:0:0:0:0:FFFF::/96}
  block quick from <v4mapped>
  block quick to <v4mapped>

Context about the security issue:

https://lists.freebsd.org/pipermail/freebsd-net/2013-June/035858.html

-- 
You are receiving this mail because:
You are the assignee for the bug.