3 ms·
> incoming connections are not routable by default, and it's very hard to accidentally change this Not just difficult, but impossible, even in principle, becau
by ninkendo 2y ago
> incoming connections are not routable by default, and it's very hard to accidentally change this
Not just difficult, but impossible, even in principle, because there are more than one device sharing the same IP so at most one host would be vulnerable. Not the same as with IPv6, where screwing up the defaults leaves your entire network vulnerable.
- Hikikomori 2y agoYou can forward all ports to a device, pretty common feature.
- ninkendo 2y agoRight but that only leaves that device vulnerable. The other devices are not.
- lanstin 2y agoIn practice, that makes the entire network vulnerable.
- pclmulqdq 2y agoYeah, server-side NAT + use of a reverse proxy makes hosting many websites from one IPv4 a possibility, albeit a relatively difficult one. You are only really in trouble if two consumers want raw TCP/UDP on one port.
- deleted 2y ago[deleted]