News for hackers. Stuff that matters.

A comment on Hello IPv6: a minimal tutorial for IPv4 users. Parent comment

Re:Hello IPv6: a minimal tutorial for IPv4 users by JackSlateur on Sunday January 28, 2024 @06:19AM (#39164571)
NAT breaks the end-to-end IP communication

To let things work, we added ALG (application level gateway), which are code used to remotely allow flows

Look at them, a whole universe of issue lies there

[ Parent | on HN ]
Re:Hello IPv6: a minimal tutorial for IPv4 users by cyberax on Sunday January 28, 2024 @12:30PM (#39167822)
ALGs are not used or needed for most protocols anymore, they are actively harmful in most cases.

The current state of the art is to use hole punching and STUN.

[ Parent | on HN ]
Re:Hello IPv6: a minimal tutorial for IPv4 users by JackSlateur on Sunday January 28, 2024 @01:06PM (#39168133)
Being used ? Being needed ? What is important is that they are here and enabled and ready to be exploited
[ Parent | on HN ]
Re:Hello IPv6: a minimal tutorial for IPv4 users by cyberax on Sunday January 28, 2024 @03:03PM (#39169285)
ALGs (for SIP and FTP) are not enabled on OpenWRT by default. And I don't think any other ALGs had ever been widely used in practice.
[ Parent | on HN ]