Re: Bypassing ISA Server 2004 with IPv6

[Christine Kronberg <seeker@xxxxxxxxx>]

On Tue, 4 Apr 2006, 3APA3A wrote:

> Dear Romain.Le.Guen@xxxxxxxxxxx,
>
> Neither  ISA  Server  2004  nor Windows 2003 Basic Firewall support IPv6
> filtering, IPX filtering, etc. This is different network protocol.

  That's no excuse for letting IPv6 packets pass the firewall.
  If I understand correctly this means that the internal LAN
  is open for any attacks as long as they are IPv6 based. If that
  is right, this is an extremly nasty bug. If ISA Server 2004
  and Windows 2003 Basic Firewall cannot filter that stuff it
  should simply drop it.

  Cheers,

  Chris Kronberg.