Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ipv6]

IPv6 is the next generation protocol for Internet networking. IPv6 expands on the current Internet Protocol standard known as IPv4. Compared to IPv4, IPv6 offers better addressing, security and other features to support large worldwide networks.

1
vote
1answer
55 views

ISP's defence methods against IPv6 Spoofing

I read about there being methods applied by ISP's to defend networks against IPv4 spoofing, but not too much about IPv6 spoofing. I'm wondering if someone has some knowledge if ISP's apply techniques ...
0
votes
0answers
26 views

OpenVPN leaks IPV6 in Ubuntu but not in android [migrated]

First of all I would like to say that I am a complete beginner in this topic. I have been trying for several hours to allow my system to connect to my VPN (I have a raspberry pi with the basic ...
0
votes
0answers
29 views

DoS with IPv6, which allows you to have multiple IP addresses per network interface [on hold]

I was wondering if it was possible to have a workaround for captchas by sending over one network interface with multiple IP addresses (like a lot) and trying to overload a server. Or is there a ...
0
votes
2answers
134 views

Why IPv6 showing on whatismyip.com?

I use Tor Browser on Whonix. Why I see IPv6 (something like 3221:23f9:c:67h:0:0:0:3) on whatismyip.com? Is that website can see my MAC Address?
4
votes
2answers
2k views

Is it dangerous to disable the IPv6 firewall built into many home routers?

The router that my ISP has delivered contains an IPv6 firewall. The only configuration option is whether it is on or off. Apparently, this firewall simply denies all incoming connections. I ...
0
votes
2answers
110 views

Do household IPv6 addresses introduce vulnerabilities? [duplicate]

Apparently, for half a year already at least, my ISP has assigned me IPv6 addresses. I discovered this accidentally, while editing Wikipedia. So it seems my ISP started to support IPv6 addresses and ...
2
votes
0answers
41 views

What is this “…ffff:ffe2” traffic being blocked?

I have a fairly simplistic pfSense setup. IPv6 is provided through a Hurricane Electric tunnel. Something on my home LAN is sending traffic from an odd-looking address, and so it's getting blocked, ...
89
votes
10answers
17k views

How would disabling IPv6 make a server any more secure?

I was reading this article about hardening security on Linux servers, and in point #23, the article says: #23: Turn Off IPv6 Internet Protocol version 6 (IPv6) provides a new Internet layer of ...
3
votes
0answers
135 views

Security Risks specific to IPv6-only hosts

Because I can get full IPv6 support now from my home office (Comcast did this right) I have started to bring up cloud servers with no IPv4 addresses -- only IPv6. I use a static address and create a ...
2
votes
2answers
1k views

IPv4, IPv6 and firewall

Say I have a server running some version of Linux and I give this server an IPv4 address of 10.1.1.1 Now using my network firewall I NAT this IP to some public IP address and I block all incoming ...
1
vote
3answers
1k views

Blocking ipv6 packets with firewall, if using an ipv4 router

A router doesn't support ipv6. There is a machine connected to the router, that is assigned an ipv4 address by the router. The machine uses firewall software. Setting up the machine's firewall, all ...
9
votes
1answer
204 views

Setting up a IPv6 Darknet/Network Telescope

I would like to setup a IPv6 Darknet/Network Telescope. It is unused address space a network that is completely passive and sends no outbound traffic. This talk gives more details. Most residential ...
0
votes
1answer
488 views

IPv6 and NAT firewall effect

It seems that people still argue on whether to use NAT with IPv6 for its side-role as a firewall hiding inner network from the outside (providing user anonymity and security as well). I am wondering ...
0
votes
1answer
838 views

My ISP provides IPv6 natively but my VPN does not support IPv6

I have an internet connection that is soon rolling out IPv6 native support but my VPN connection is far from rolling out IPv6 connection. Can there can be any sort of leak if I still connect to my ...
0
votes
1answer
332 views

Is only using one IP address version (IPv4/IPv6) an availability risk?

Most websites configure their domain name server records only with A records for the use in IPv4 networks only. Some websites have configured AAAA records as well for use in IPv6 networks, using both ...
2
votes
0answers
69 views

IPv6 Spams dataset?

My master thesis is about "Managing Spam Under IPv6". I would like to use machine learning algorithm on information retrieved from mail headers in order to sort out spams from legitimate mails. To do ...
18
votes
3answers
6k views

Is IPv6 more secure than IPv4?

One of my friends is going to implement IPv6 in his university network environment and he told me it is more secure than IPv4. Is IPv6 more secure than IPv4? If so, how is it achieved on the protocol ...
1
vote
1answer
111 views

Searching a tool to perform SSL/TLS handshakes and store data [closed]

As the title says, I am searching for a tool, which can do the following: Do SSL Handshake beeing given a list of IP-Addresses Support SNI (in that case hostnames would be in the list, too) ...
2
votes
1answer
125 views

IPv6 private network adressing

While sniffing a training network with Wireshark, I realized that it contains some IPv6 addresses. So I decided to nmap one of the IPv6 address found (with the -6 option), and was able to see my own ...
0
votes
1answer
425 views

How to retrieve an IPV6 knowing the IPV4? [closed]

I'm using nmap to scan a training lab environment, and I would like to check if a remote machine has an IPV6 address. I only know the IPV4 of the machine. And I know that scanning through IPV6 would ...
0
votes
0answers
70 views

Throttling IPv6 requests - what would be a suitable subnet size?

I'm trying to come up with a request throttling policy for a web application based on IP addresses. For throttling requests for users on IPv4, a subnet size of /32 (i.e. a single IP address) is often ...
4
votes
1answer
728 views

Configuring socat to pentest an IPv6-only remote web server from an IPv4 host

I need to pentest an IPv6-only web server situated in a remote network from my IPv4 host (Kali Linux VM). I have a 6-to-4 tunnel up between the two hosts (configured using Hurricane Electric). I'm ...
2
votes
1answer
217 views

Can ping flooding attacks still be implemented in a IPv6 network?

Can ping flooding attacks still be implemented in a IPv6 network? And what could be a good way to simulate such an attack?
1
vote
2answers
858 views

Bypassing the GFW with IPv6 and proxying all IPv4 traffic

I hope I'm in the right forum for this kind of question. I'm in China and as you're probably all aware, the Great Firewall (GFW) blocks a lot of websites. Surprisingly, when using the IPv6 connection ...
0
votes
1answer
67 views

Impairment of security by introduction of ipv6 [duplicate]

If you get a public IPv6 on your device, and someone gets hold of your momentary IPv6 (which changes every 24h by the privacy extensions), a possible attacker could start a lot of automated tools on ...
1
vote
1answer
87 views

Is KDD CUP methodology sufficient to describe all possible attacks in IPv6?

KDD CUP dataset has been used to train IPv4 intrusion detection systems. The attacks are identified with the help of these pre-determined features. Are these features sufficient to classify the ...
1
vote
3answers
4k views

Spoofed MAC address with macchanger but cant connect to internet

So I used macchanger to spoof my mac address with these commands: sudo ifconfig (interface) down sudo macchanger -m (mac_address) (interface) sudo ifconfig (interface) up If I stop here I will not ...
0
votes
1answer
112 views

Why doesn't my IP change on manual router turn off/on? [closed]

Basically the title. I remember that when still having IPv4 addresses, my IP changed after the router turn off/on. This doesn't seem to be the case with IPv6. Since there are almost 10^40 addresses ...
1
vote
1answer
927 views

How do I scan for and discover active IPv6 addresses of devices behind a router?

Usually with IPv4 and NAT you can only access a device behind a router if the router is port-forwarded correctly or is the router's DMZ. When behind the router you can easily scan for the IPs behind ...
4
votes
1answer
4k views

Question about IPv6, NAT, firewall, port forwarding, upnp and security

In the next months/years my ISP might give me IPv6 for my home connection. But what are the security implications? Will local network servers/embedded devices be accessible from the whole internet? ...
-6
votes
1answer
92 views

Can an ip be forced to connect? If so, how is it done, and how can I prevent it? [closed]

Can an IP be forced to receive data from another IP (specifically IPv6 for both)? If so how does this work, and how can I prevent this from happening to me? Does that have any way to be broken? If so ...
2
votes
1answer
181 views

Is possible for a vulnerability search engine to detect the ipv6 adresses?

Using IPV4 protocol, vulnerability search engines can detect and index Internet connected devices. It will be easy for a hacker to collect a lot of information about some devices and perform an attack....
0
votes
0answers
80 views

IPv6 and Windows network location

I recently got IPv6 at home, and it got me thinking, what is the consequences of my computer network location being set to private? With IPv4, my machine had a private address, and couldn't me ...
2
votes
0answers
32 views

Is the crypto-key pair in IPv6 SeND persistent?

IPv6 introduces the NDP extension SeND to help mitigate identity theft, however, is the non-PKI public/private key pair used during the process persistent to some degree, or generated on every ...
2
votes
2answers
1k views

Telnet port open on my router public IPv6 address

Recently I upgraded my home router into this one. It is a cheap one, but it has features I needed: IPv6 support and Gigabit Ethernet. So I decided to give IPv6 a try. I configured a Hurricane ...
6
votes
2answers
364 views

What parts of IPv6 address may I show publicly and safely?

I want to ask question about some network issue, i.e. about printing the IPv6 address correctly. I assume the users expect me to provide some meaningful examples of what I expect and what I have. ...
8
votes
1answer
2k views

Is receiving IPv4 connections on AF_INET6 sockets insecure?

The FreeBSD man page for inet6 has the following: By default, FreeBSD does not route IPv4 traffic to AF_INET6 sockets. The default behavior intentionally violates RFC2553 for security reasons. ...
1
vote
2answers
186 views

Assigning random IPv6 ranges to ISPs as a security measure

Pinging all the IPv4 address space takes about 5 hours (and can generate beautiful maps). Port-scanning doesn't take much longer and can reveal vulnerable services, such as remote administration of ...
4
votes
1answer
22k views

How do I use nmap to scan a range of IPv6 addresses? [closed]

I need to scan a range of IPv6 addresses with Nmap, but I'm not sure how to do this. When scanning for an IPv4 range, I would usually do this: nmap -sP 192.168.*.* or nmap -sP 192.168.1.* but if I ...
2
votes
1answer
2k views

How can I secure IP Multicast traffic?

I'm interested in securing IP Multicast traffic for content that will be sent globally with several low bandwidth receivers. I understand that simplified Broadcast encryption takes N public keys ...
39
votes
5answers
45k views

With IPv6 do we need to use NAT any more?

I'm wondering how to use NAT with IPv6. Seems that you don't even need it any more. So what exactly is the concept behind firewall configurations in IPv6 environments?
9
votes
3answers
6k views

How will IPv6 affect DDoS mitigation techniques?

IPv6 introduces a much larger address space than IPv4 and with it there are many new techniques in creating and mitigating DDoS attacks. What are some examples of risks and mitigations? For example, ...
9
votes
3answers
981 views

Does IPv6 without NAT allow my ISP to identify/monitor/limit the number of devices in my network?

Does switching to IPv6 without any NAT mean my that ISP can identify/monitor/limit the number of devices in my private network more than they can with NAT (which is a necessity in an a private IPv4-...
4
votes
1answer
216 views

Reflection Attacks on Server

I was reading a research paper entitled "Steps to Defend Against DoS Attacks" when I came across this point: "A reflection attack on a server would require server-client-server communication, ...
0
votes
2answers
1k views

Enabling firewall for the IPv6 tunnel on Windows 2008 64-bit

I am currently on a IPv4 network. The IPv4 network is accessed by a router, which gives my machines IPv4 addresses via NAT. On one of the machines, a Windows 2008 64-bit machine, I have set up a IPv6 ...
1
vote
1answer
200 views

Is there a compatibility issue between IPv6 and security testing tools?

Now that IPv6 is slowly coming into the picture, will there be a compatibility issue with using security testing tools, e.g.,: Network vulnerability scanning tools Web Applicaiton vulnerability ...
1
vote
1answer
6k views

What are the risks of removing ISATAP from the default global block list?

The process of installing Microsofts pseudo VPN called Direct Access requires me to remove the ISATAP name from the default global block list by running this command: dnscmd /config /...
0
votes
3answers
9k views

Which tool (apart from nmap) can I use to scan a range of IPv6 addresses? [closed]

When I try to use nmap: # nmap -sP -6 FE80::1-234 [...] Failed to resolve given IPv6 hostname/IP: FE80::1-234. Note that you can't use '/mask' or '[1-4,7,100-]' style ranges for IPv6.[...] What ...
2
votes
1answer
3k views

How do I protect my Windows computer against the IPV6 flood attack shown in this video

In the DefCon video "Three Generations of DoS Attacks (with Audience Participation, as Victims)", the speaker demonstrates how it is possible to crash a variety of devices by flooding them with IPV6 '...
7
votes
4answers
132k views

Is Teredo in my router a back door?

I use the school computer, which I bought from school, administered by the IT-department. I opened a port to my computer when I stumbled upon this: It points to my computer IP. (I have a static IP ...