2 ms·
Doing blacklisting of IPv6 addresses is actually quite hard, because you can't know how network owners lay out their addresses. Some networks (especially VPS pr
by samuellb 11y ago
Doing blacklisting of IPv6 addresses is actually quite hard, because you can't know how network owners lay out their addresses. Some networks (especially VPS providers) will use one /64 (or so) per datacenter, while other will give out a /64 for individual users.
So when 2001:db8:a1:b2::c:3 has sent spam to you, you can't know if you should block the network 2001:db8:a1:b2::/64 or the specific address 2001:db8:a1:b2::c:3. Some blacklists (carelessly) take the former approach and block entire datacenters.
- andrewpe 11y agoHonestly, if an entire datacenter is using a single /64 it sounds like they are doing something wrong. It's as easy to get a /48 with 65k individual /64 (one for each customer) as it is to get a single /64