Hello IPv6: a minimal tutorial for IPv4 users

Re:Hello IPv6: a minimal tutorial for IPv4 users by greyface- on Monday January 29, 2024 @12:22AM (#39172966)

Hi, Condointernet/WaveG/Astound user. I've used their network before, and from experience, they put you on the same L2 segment as your neighbors. There's ARP/DHCP/etc filtering in place on the switch to prevent most kinds of shenanigans, but your neighbors can still send packets with a RFC1918 dst IP to your Ethernet address.

To ping your internal hosts, I'd need to gain access to your building or one sharing the same L2 segment ("dfsea"?), then configure a static route for 10/8 / 192.168/16 / etc pointing at you. I would not need any control over the ISP.

[ Parent | on HN ]

Re:Hello IPv6: a minimal tutorial for IPv4 users by cyberax on Monday January 29, 2024 @01:25PM (#39180131)

I'm on a business line, and the L2 Ethernet segment consists of 1 device, their router.

And most of Wave users (or any broadband users in the US, for that matter) use DOCSIS, which does not have a shared L2.

[ Parent | on HN ]

Re:Hello IPv6: a minimal tutorial for IPv4 users by greyface- on Monday January 29, 2024 @11:45PM (#39186485)

That's fantastic for you, and for DOCSIS users (setting aside DOCSIS' other pain points), but your neighbors on residential Ethernet-based plans do not enjoy the supposed security benefits of NAT that you claimed upthread.

[ Parent | on HN ]