Re: SV: SV: SV: CPE Residential IPv6 Security Poll

2016-10-01 Thread Daniel Roesen 
On Thu, Sep 29, 2016 at 01:50:07PM +0200, e.vanu...@avm.de wrote:
> CU at BBWF ;-) We are building CPE with IPv6 on board.

Which still can't even do static IPv6 routes or open firewall for
adresses in prefixes not directly connected.

Example: getting a /48 from upstream, either statically routing or
PD'ing this to another inside router. No way to disable firewalling for
those.

Since AVM did close the shell access to the FB, you cannot even manually
add the static routes. So FB with current OS is basically unusable for
anything but directly connected networks (main/guest) in IPv6. I'm
looking for a replacement for my 7390 as this problem doesn't allow me
to upgrade firmware anymore (as I would lose telnet access and thus IPv6
in my home networks).

Nevertheless, welcome to the list. :-)

Best regards,
Daniel

-- 
CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0

Re: SV: SV: SV: CPE Residential IPv6 Security Poll

2016-09-29 Thread Holger Zuleger 


On 29.09.2016 14:28, Thomas Schäfer wrote:
> Am 29.09.2016 um 13:50 schrieb e.vanu...@avm.de:
>> CU at BBWF ;-) We are building CPE with IPv6 on board.
>>
>> https://tmt.knect365.com/bbwf/sponsors/avm
>>
>> Eric
> 
> Without IPv6-support for vpn, without configurable firewall for
> dhcpv6-pd, without the ability to disable IPv4-myfritz-DNS-entries.
... without static routes for IPv6 and, to come back to the original
topic: Without the possibility to turn of the IPv6 firewall...

> AVM is good, but not perfect.
Ack! And I like the way how the IPv6 firewall is configurable, but a
(maybe somehow hidden) knob to turn it completely off, or even set it to
a relaxed security like the Swisscom way, would be great.

BR
 Holger



smime.p7s
Description: S/MIME Cryptographic Signature

Re: SV: SV: SV: CPE Residential IPv6 Security Poll

2016-09-29 Thread Thomas Schäfer 

Am 29.09.2016 um 13:50 schrieb e.vanu...@avm.de:

CU at BBWF ;-) We are building CPE with IPv6 on board.

https://tmt.knect365.com/bbwf/sponsors/avm

Eric


Without IPv6-support for vpn, without configurable firewall for 
dhcpv6-pd, without the ability to disable IPv4-myfritz-DNS-entries.
Some IPv6-menus still hidden, only in expert view or far far away from 
the users focus.


AVM is good, but not perfect.


Regards,
Thomas





--

There’s no place like ::1

Thomas Schäfer (Systemverwaltung)
Ludwig-Maximilians-Universität
Centrum für Informations- und Sprachverarbeitung
Oettingenstraße 67 Raum C109
80538 München ☎ +49/89/2180-9706  ℻ +49/89/2180-9701

Re: SV: SV: SV: CPE Residential IPv6 Security Poll

2016-09-29 Thread e . vanuden 
CU at BBWF ;-) We are building CPE with IPv6 on board.

https://tmt.knect365.com/bbwf/sponsors/avm

Eric





Von:
An: 
Kopie:  ipv6-ops@lists.cluenet.de
Datum:  29-09-2016 11:27
Betreff:SV: SV: SV: CPE Residential IPv6 Security Poll
Gesendet von:   ipv6-ops-bounces+e.vanuden=avm...@lists.cluenet.de



>>And just to trow this conversation futher of, anybody else here coming 
to BBWF this year?
>
> I’ll be there... Beers?

Good idea.  Any non-Norwegians who would like to join? :)

-E