IPv6 Teredo Tunnel
| ipv6-teredo (17897) |  High Risk |
Description:
Teredo is a transition mechanism that allows IPv6 traffic to be encapsulated within an IPv4 UDP packet. Teredo can negotiate a NAT firewall and allow bidirectional routing of traffic across that tunnel.
Platforms Affected:
- Miredo, Teredo for Linux
Remedy:
Teredo uses port 3544 UDP to establish and maintain the tunnel. Blocking traffic on this port will prohibit the use of Teredo.
Consequences:
Bypass Security
References:
- Microsoft Technet Web page January 1, 2003, Teredo Overview at http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/teredo.mspx.
- Miredo Terodo for Linux Web site, Miredo : Teredo IPv6 tunneling for Linux at http://www.simphalempin.com/dev/miredo/.
Reported:
Not available
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net