3 ms·
Mobile carriers usually have stateful firewalls for IPv6 as well (otherwise you can get a lot of random noise on the air interface, draining both your battery a
by lxgr 8mo ago
Mobile carriers usually have stateful firewalls for IPv6 as well (otherwise you can get a lot of random noise on the air interface, draining both your battery and data plan), so it's an issue just the same.
The constrained resource there is only firewall-side memory, though, as opposed to that plus (IP, port) tuples for CG-NAT.
- withinboredom 8mo ago> otherwise you can get a lot of random noise on the air interface, draining both your battery and data plan I highly doubt you get "random" data over ipv6. There are more ipv6 addresses than there are atoms on the planet.
- lxgr 8mo agoYes, but they're not randomly distributed across the entire number space. For example, receiving traffic from a given address is a pretty good indicator that there's somebody there possibly worth port scanning. And where there has once been somebody, there or in the same neighborhood (subnet) might be somebody else, now or in the future.
- withinboredom 8mo agoThen it isn't random noise. It is determined by your own actions.
- lxgr 8mo agoOr my predecessor/address space neighbor, or that of somebody using my wireless hotspot once, or that of me clicking a random link once and connecting to 671 affiliated advertisers's analytics servers... I think a default policy of "no inbound connections" does makes sense for most mobile users. It should obviously be configurable.