RE: Anyone seen an ipv6 to ipv4 dll and vice versa?

["Dave Gilmore (Intrusense)" <dgilmore () intrusense com>]

Hello,

I'm not certain, but I think you may be referring to one of the many
v4<->v6 tunneling clients out there. Freenet6 (http://www.freenet6.net)
is probably the most popular. 

And yes, historically they've been used to bypass IDS, IPS and Honeypot
technology since support is either weak or non-existent at the moment.
There was a fairly lengthy thread on the Honeynet list several months
ago. See:
http://archives.neohapsis.com/archives/sf/honeypots/2002-q4/0111.html
for more details.


Sincerely,

Dave Gilmore
Intrusense LLC.
http://www.intrusense.com

--
Intrusense - Securing Business As Usual

-----Original Message-----
From: secureot [mailto:secureot () yahoo com] 
Sent: Thursday, October 09, 2003 4:11 PM
To: security-basics () securityfocus com
Subject: Anyone seen an ipv6 to ipv4 dll and vice versa?


Hi all,
I have recently heard that there is a dll that is
getting planted on Windows machines out there, that
transforms the encapsulation of packets from IPv6 to
IPv4 and back (hence getting around your firewalls).
I am wondering if anyone knows what that dll is (one
or several)? Has an example of it, knows how to
patch/block it and has experienced it?
Any info would be appreciated...
Thanks,
> :-)
O


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

------------------------------------------------------------------------
---
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
----------------------------------------------------------------------------