News for hackers. Stuff that matters.
Re:IP addresses and routing by disiplus on Thursday July 26, 2018 @07:39AM (#17616628)
i also disable ipv6 on my servers for abuse purposes, it is to easy to get iv6 addresses
Re:IP addresses and routing by kiallmacinnes on Thursday July 26, 2018 @12:25PM (#17618683)
Do you mean you turn off IPv6, because it's easy for others to get lots of IPs and bypass a IP blacklist?

If so, that is a difference from IPv4. Don't block IPs, block subnets. Block the whole /64. It's what you were doing with IPv4 anyway - blocking a whole building / office / etc at once!

That's still no reason to turn IPv6 off in my humble opinion...

Re:IP addresses and routing by ryanlol on Friday July 27, 2018 @05:26AM (#17624662)
IPv6 ratelimiting can be a bit tricky, you block my /64 and I come back with a /48 and so on.

Most stuff defaults to bucketing by /64s.

Re:IP addresses and routing by kiallmacinnes on Friday July 27, 2018 @07:46AM (#17625240)
Right, but how does this differ from IPv4? Every time I restart my cable modem, I get a new IP from a /18 or so of IPv4 space.

IP blocking is far from ideal, in both versions of IP.. IPv6 makes this no better, or worse.

Re:IP addresses and routing by ryanlol on Friday July 27, 2018 @10:56AM (#17626386)
You get a single IP, that doesn’t scale well at all.
Re:IP addresses and routing by okket on Thursday July 26, 2018 @08:03AM (#17616758)
Please do not disable IPv6.
Re:IP addresses and routing by blattimwind on Thursday July 26, 2018 @09:31AM (#17617292)
Disagree. If you've only got IPv4 experience and have a number of possibly legacy devices on your network, then there is a significant amount of learning and changes required to make it work with IPv6 (securely).

It's entirely reasonable to say "It works fine without [=zero business value], no need to invest that amount of work.". This makes IPv6 a negative value proposition for many orgs.

Re:IP addresses and routing by mirimir on Thursday July 26, 2018 @12:25PM (#17618676)
It depends on the context.

I mostly focus on users of VPN services. It's still rare for them to handle IPv6 traffic. So if you have IPv6 connectivity, IPv6 will leak, bypassing the VPN. Unless you have firewall rules, or disable IPv6 while using the VPN.