News for hackers. Stuff that matters.

A comment on Comcast’s Xfinity Internet Now the World’s Largest Native IPv6 Deployment. Parent comment

Re:Comcast’s Xfinity Internet Now the World’s Largest Native... by wmf on Tuesday November 26, 2013 @09:07PM (#6805753)
There's an IETF standard that says IPv6 home routers should have a default deny firewall. http://tools.ietf.org/html/rfc6092#page-15 Some people are trying to get it changed: http://tools.ietf.org/html/draft-v6ops-vyncke-balanced-ipv6-...
[ Parent | on HN ]
Re:Comcast’s Xfinity Internet Now the World’s Largest Native... by simoncion on Tuesday November 26, 2013 @10:10PM (#6806053)
Both of those are Informational documents, not Standards. :) Documents like this one are Standards: http://tools.ietf.org/html/rfc2616

Given the quality of MSFT's and Apple's firewalls, and the ease of use of MSFT's (I assume Apple's is easy to use, but I have no direct experience), I cannot agree that a default DENY firewall policy is a good default configuration. We'd be back in the world where consumers would need something uPnP to manage firewall rules on their router.

I can agree that refusing to route requests to things like port 445/tcp is reasonable.

[ Parent | on HN ]