News for hackers. Stuff that matters.

A comment on IP addresses and routing. Parent comment

Re:IP addresses and routing by kiallmacinnes on Thursday July 26, 2018 @12:25PM (#17618683)
Do you mean you turn off IPv6, because it's easy for others to get lots of IPs and bypass a IP blacklist?

If so, that is a difference from IPv4. Don't block IPs, block subnets. Block the whole /64. It's what you were doing with IPv4 anyway - blocking a whole building / office / etc at once!

That's still no reason to turn IPv6 off in my humble opinion...

[ Parent | on HN ]
Re:IP addresses and routing by ryanlol on Friday July 27, 2018 @05:26AM (#17624662)
IPv6 ratelimiting can be a bit tricky, you block my /64 and I come back with a /48 and so on.

Most stuff defaults to bucketing by /64s.

[ Parent | on HN ]
Re:IP addresses and routing by kiallmacinnes on Friday July 27, 2018 @07:46AM (#17625240)
Right, but how does this differ from IPv4? Every time I restart my cable modem, I get a new IP from a /18 or so of IPv4 space.

IP blocking is far from ideal, in both versions of IP.. IPv6 makes this no better, or worse.

[ Parent | on HN ]
Re:IP addresses and routing by ryanlol on Friday July 27, 2018 @10:56AM (#17626386)
You get a single IP, that doesn’t scale well at all.
[ Parent | on HN ]