6 ms·
Why is it harder to firewall them with IPv6? I seems this would be the easier of the two to firewall.
by 1970-01-01 2y ago
Why is it harder to firewall them with IPv6? I seems this would be the easier of the two to firewall.
- echoangle 2y agoMaybe it’s easier to circumvent because getting a new IPv6 address is easier than with IPv4?
- firesteelrain 2y agoI think they are suggesting the range of IPs to block is too high?
- CBLT 2y agoAllow -> Tarpit -> Block should be done by ASN
- lillecarl 2y agoYou probably want to check how many ips/blocks a provider announces before blocking the entire thing. It's also not a common metric you can filter on in open firewalls since you must lookup and maintain a cache of IP to ASN, which has to be evicted and updated as blocks still move around.
- lillecarl 2y agoManual banning is about the same since you just book /56 or bigger, entire providers or countries. Automated banning is harder, you'd probably want a heuristic system and look up info on IPs. IPv4 with NAT means you can "overban" too.
- malfist 2y agoWhy wouldn't something like fail2ban not work here? That's what it's built for and has been around for eons.