LXer: Using IPv6 with Linux? You've likely been visited by Shodan and other scanners
Syndicated Linux NewsThis forum is for the discussion of Syndicated Linux News stories.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
LXer: Using IPv6 with Linux? You've likely been visited by Shodan and other scanners
Published at LXer:
One of the benefits of the next-generation Internet protocol known as IPv6 is the enhanced privacy it offers over its IPv4 predecessor. With a staggering 2128 (or about 3.4?1038) theoretical addresses available, its IP pool is immune to the types of systematic scans that criminal hackers and researchers routinely perform to locate vulnerable devices and networks with IPv4 addresses.
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680
Rep:
Enhanced privacy? Only if you never do anything on the internet, ever. If you do connect to the internet then, obviously, the actual address of your specific device (which will not change if you connect to the internet another way) is exposed.
Still, apparently NAT is "security through obscurity" and not needed for IP6...
Unless I misunderstood, the whole point of the article is that IPv6 is security through obscurity, which is no security. NAT is not security through obscurity, but apparently is only implemented for ipv4. The only thing probed with a ipv4 router is the router, because of NAT. Until firewalls are standard on IPv6 routers, I think it'd be madness to not use a IPv4 router.
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680
Rep:
Quote:
Originally Posted by mostlyharmless
Unless I misunderstood, the whole point of the article is that IPv6 is security through obscurity, which is no security. NAT is not security through obscurity, but apparently is only implemented for ipv4. The only thing probed with a ipv4 router is the router, because of NAT. Until firewalls are standard on IPv6 routers, I think it'd be madness to not use a IPv4 router.
I think there is a bit more too it than that but, yes, that's what I took from it also. Quite why somebody thought it would be a good idea to have a unique, globally accessible, IP address for every device in the world is beyond me. As you pint out NAT is not security through obscurity but does provide a certain amount of actual security.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
