===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/etc/netstart,v
retrieving revision 1.64
retrieving revision 1.65
diff -c -r1.64 -r1.65
*** src/etc/netstart	2000/03/10 13:21:51	1.64
--- src/etc/netstart	2000/03/12 04:18:47	1.65
***************
*** 1,6 ****
  #!/bin/sh -
  #
! #	$OpenBSD: netstart,v 1.64 2000/03/10 13:21:51 todd Exp $
  
  # Returns true if $1 contains only alphanumerics
  isalphanumeric() {
--- 1,6 ----
  #!/bin/sh -
  #
! #	$OpenBSD: netstart,v 1.65 2000/03/12 04:18:47 itojun Exp $
  
  # Returns true if $1 contains only alphanumerics
  isalphanumeric() {
***************
*** 53,58 ****
--- 53,63 ----
  	# disallow "internal" addresses to appear on the wire.
  	route add -inet6 ::ffff:0.0.0.0 -prefixlen 96 ::1 -reject
  	route add -inet6 ::0.0.0.0 -prefixlen 96 ::1 -reject
+ 	# disallow packets to malicious 6to4 prefix
+ 	route add -inet6 2002:e000:: -prefixlen 20 ::1 -reject
+ 	route add -inet6 2002:7f00:: -prefixlen 24 ::1 -reject
+ 	route add -inet6 2002:0000:0000:: -prefixlen 48 ::1 -reject
+ 	route add -inet6 2002:ffff:ffff:: -prefixlen 48 ::1 -reject
  
  	rtsolif=""
  else