News for hackers. Stuff that matters.

A comment on I spent a week without IPv4 to understand IPv6 transition mechanisms. Parent comment

Re:I spent a week without IPv4 to understand IPv6 transition... by viraptor on Monday March 06, 2023 @10:51PM (#35051329)
The same comment applies to ipv4. Port bindings accessible from outside by accident, misconfigured upnp, SIP-ALG with vulnerabilities, various other router issues. "What if my firewall is broken" is not a new ipv6 consideration.
[ Parent | on HN ]
Re:I spent a week without IPv4 to understand IPv6 transition... by jbverschoor on Tuesday March 07, 2023 @02:42AM (#35052664)
It’s not, but the “beauty” of NAT is that you have an extra line of defense because of its limitations. Port bindings and upnp are far less impactful and less common.
[ Parent | on HN ]
Re:I spent a week without IPv4 to understand IPv6 transition... by viraptor on Tuesday March 07, 2023 @03:07AM (#35052843)
I'm not talking about preconfigured port mapping. I'm taking about bindings as in entries in NAT. That happens on every outbound connection and has stateful processing. We're still finding issues with it, like the relatively recent NAT Slipstream vulnerability.
[ Parent | on HN ]