IPv6 is the next generation protocol for Internet networking. IPv6 expands on the current Internet Protocol standard known as IPv4. Compared to IPv4, IPv6 offers better addressing, security and other features to support large worldwide networks.
3
votes
3answers
241 views
How will IPv6 affect DDoS mitigation techniques?
IPv6 introduces a much larger address space than IPv4 and with it there are many new techniques in creating and mitigating DDoS attacks. What are some examples of risks and mitigations?
For example, ...
3
votes
2answers
180 views
Does IPv6 without NAT allow my ISP to identify/monitor/limit the number of devices in my network?
Does switching to IPv6 without any NAT mean my that ISP can identify/monitor/limit the number of devices in my private network more than they can with NAT (which is a necessity in an a private ...
2
votes
1answer
110 views
Reflection Attacks on Server
I was reading a research paper entitled "Steps to Defend Against DoS Attacks" when I came across this point:
"A reflection attack on a server would require server-client-server
communication, ...
0
votes
2answers
280 views
Enabling firewall for the IPv6 tunnel on Windows 2008 64-bit
I am currently on a IPv4 network. The IPv4 network is accessed by a router, which gives my machines IPv4 addresses via NAT.
On one of the machines, a Windows 2008 64-bit machine, I have set up a IPv6 ...
0
votes
1answer
82 views
Is there a compatibility issue between IPv6 and security testing tools?
Now that IPv6 is slowly coming into the picture, will there be a compatibility issue with using security testing tools, e.g.,:
Network vulnerability scanning tools
Web Applicaiton vulnerability ...
1
vote
1answer
931 views
What are the risks of removing ISATAP from the default global block list?
The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command:
dnscmd /config ...
-2
votes
3answers
1k views
Which tool (apart from nmap) can I use to scan a range of IPv6 addresses? [closed]
When I try to use nmap:
# nmap -sP -6 FE80::1-234
[...]
Failed to resolve given IPv6 hostname/IP: FE80::1-234. Note that you can't use '/mask' or '[1-4,7,100-]' style ranges for IPv6.[...]
What ...
2
votes
1answer
537 views
How do I protect my Windows computer against the IPV6 flood attack shown in this video
In the DefCon video "Three Generations of DoS Attacks (with Audience Participation, as Victims)", the speaker demonstrates how it is possible to crash a variety of devices by flooding them with IPV6 ...
0
votes
0answers
91 views
Browsing IPv4 IPs [closed]
Recently, I stumbled up on an online tool called "Ip Browser" (IIRC, it was from domaintools.com) it serves the same purpose as http://ipbrowser.digitalmethods.net but the interface was quite ...
3
votes
3answers
18k views
Is Teredo in my router a back door?
I use the school computer, which I bought from school, administered by the IT-department. I opened a port to my computer when I stumbled upon this:
It points to my computer IP. (I have a static IP ...
6
votes
2answers
407 views
How do experienced users test stateful firewall?
How do experienced users test stateful firewall with TCP/IPv6?
My test case includes:
echo reply without request
tcp ack without syn
Are there any more test cases, especially with IPv6?
6
votes
1answer
435 views
Spoofed IPv4 and IPv6 addresses over the internet
I have a few questions regarding IPv4 and IPv6 spoofing. Might as well just list them to be concise:
What's the usual routing policy for ISPs' routers in regards to spoofed source addresses? i.e. if ...
6
votes
2answers
195 views
What implications does IPv6 have for internet worms and script kiddies?
Though IPv6 is not here yet it one day we will all lose our familiar IPv4 addresses and be communicating over the internet solely with IPv6 addresses.
What interests me is the implications this has ...
7
votes
3answers
333 views
Is IPv6 with NAT less secure than IPv4?
This is a follow up to a snippet from another answer.
There, user Ninefingers writes:
(...) only allow outbound connections, ever. Do this in spite of NAT as IPv6 will make those NAT defences ...
2
votes
1answer
390 views
IPV6 Cryptographically Generated Address implementation
I am looking to an Cryptographically Generated Address (CGA) implementation in Java or in C++.
Would be glad if someone can help.
5
votes
2answers
371 views
Does DNSSec have any benefit if used with IPSec-enabled IPv6?
I'm not sure if the RFC's support a IPSec-only implementation of DNS, but if it does, what does that mean for DNSSec?
Is DNSSec an IPv4-only technology?
21
votes
3answers
560 views
What are the security risks in enabling ipv6
We are considering enabling ipv6 on our webservers, so that we are reachable with both ipv4 and ipv6. Are there any security issues we should consider when enabling ipv6?
