* Posts by jm493

2 posts • joined 22 Aug 2012

IPv6 and 5G will make life hell for spooks and cops say Australia's spooks and cops

jm493

ARE YOU SHARING THE SAME IP ADDRESS AS A CRIMINAL?

EUROPOL thinks differently to the Australian spooks and cops:

https://www.europol.europa.eu/newsroom/news/are-you-sharing-same-ip-address-criminal-law-enforcement-call-for-end-of-carrier-grade-nat-cgn-to-increase-accountability-online

They think CGN will reduce accountability, and IPv6 will increase it.

"Other solutions reviewed were ... the possibility to adopt regulations for the internet industry to ***increase IPv6 deployment.***"

===

Also IPv6 Security isn't mandatory to implement since Dec 2011

https://tools.ietf.org/html/rfc6434#section-11

and IPsec has been retrofitted to IPv4 too.

How I Learned to Stop Worrying and Love IPv6

jm493
Thumb Up

Re: NAT vs stateful ACLs

Many consumer-grade IPv6-capable home routers do already include "Simple Security" ACLs that provide equivalent blocking for inbound IPv6 traffic as they do for IPv4 traffic.

Described at http://tools.ietf.org/html/rfc6092

https://labs.ripe.net/Members/marco/ipv6-cpe-survey-results-may-2011

---

With firewalls there is a clear distinction between the more professional units and the models aimed for the residential markets. Most of the residential devices come with an enabled filter that mimics the behaviour of standard IPv4 NAT, blocking incoming connections by default. ...

---

Biting the hand that feeds IT © 1998–2019