News for hackers. Stuff that matters.

A comment on Hello IPv6: a minimal tutorial for IPv4 users. Parent comment

Re:Hello IPv6: a minimal tutorial for IPv4 users by cyberax on Monday January 29, 2024 @01:22PM (#39180055)
> I wasn't arguing that; my point was just that NAT won't stop any inbound connection, and if your inbound connections are being stopped by something... then the something isn't NAT.

NAT _will_ stop inbound connections in practice, unless you control the ISP. So in practice NAT provides more than enough security for typical SOHO users.

> Sure. Since I'm using RFC1918 on the inside you'll need to be on my immediate upstream segment to test this

Exactly. Which means that you need (in practice) to control the ISP for this attack to work.

[ Parent | on HN ]
Re:Hello IPv6: a minimal tutorial for IPv4 users by Dagger2 on Monday January 29, 2024 @03:21PM (#39181938)
No, it won't. All that's needed is an inbound route to your router, and NAT can't prevent that route from existing. It doesn't matter if you have ISP control or not.

I'm not seeing any gre packets from you. Are you having trouble getting the tunnel working?

[ Parent | on HN ]
Re:Hello IPv6: a minimal tutorial for IPv4 users by Dagger2 on Saturday February 03, 2024 @10:30AM (#39241214)
...are you going to do this experiment or not? I've got the whole setup just waiting for you.
[ Parent | on HN ]