3 ms·
The IP blacklisting section seems fragile to me. What about IPv6 or multiple A records? I would rather let the OS connect the way it prefers and once it is con
by nicolaslem 8y ago
The IP blacklisting section seems fragile to me. What about IPv6 or multiple A records?
I would rather let the OS connect the way it prefers and once it is connected, check that the remote is a legit IP address before sending anything.
- jkarneges 8y agoIPv6: blacklist similar address ranges. Multiple A records: be sure to check against each record before connecting. Connecting first and then checking the remote IP before sending anything could work I suppose, but I think you'd still need to check against a blacklist.