On Tuesday 2012-11-27 15:54, Fernando Gont wrote:

Folks,

FYI. This is might affect Linux users employing e.g. OpenVPN:
<http://tools.ietf.org/html/draft-gont-opsec-vpn-leakages>.

For a project such as OpenVPN, a (portable) fix might be non-trivial.

If the VPN server does not even advertise to-be-secured IPv6 prefixes, 
any client-side fix is questionable. Disabling all of IPv6 on the client 
just because no IPv6 prefixes were sent is bogus.. it is like disabling 
all my IPv4 internet just because the server only gave me one IPv6 route 
into $internal_company_network.