News for hackers. Stuff that matters.

A comment on I spent a week without IPv4 to understand IPv6 transition mechanisms. Parent comment

Re:I spent a week without IPv4 to understand IPv6 transition... by temp2022account on Monday March 06, 2023 @11:37AM (#35043057)
To be fair that info is already available w/ port sequence analysis, the same machine will pick from the same set of ephemeral ports for outgoing connections. I'd say the time for vanity privacy arguments is over, I'm all-in for team globally routable addresses w/ firewalls just saying "yes" or "no" to connections instead of routers guessing at port mappings.
[ Parent | on HN ]
Re:I spent a week without IPv4 to understand IPv6 transition... by waych on Monday March 06, 2023 @12:06PM (#35043501)
Port sequence analysis is stifled by SNAT though.
[ Parent | on HN ]
Re:I spent a week without IPv4 to understand IPv6 transition... by adriancr on Monday March 06, 2023 @12:09PM (#35043553)
> the same machine will pick from the same set of ephemeral ports for outgoing connections.

Ports on router are allocated by it and not client machines. So far my experience has been they're usually sequential without any preferrence.

[ Parent | on HN ]