SV: CPE Residential IPv6 Security Poll

2016-09-20 Thread erik.taraldsen
I'm dealing with the CPE's for Telenor here in Norway. And indeed a part of the Norwegain discussion. Today we block incoming traffic to protect the customers. We seek to have the same security policy as for IPv4. Meaning statefull firewall which the customer can configure if they want to.

SV: CPE Residential IPv6 Security Poll

2016-09-20 Thread erik.taraldsen
With all due respect to the actual power user out there. For each one of them, there is at least 20 who think they are power users who base their knowledge on rumors and misconceptions. They are often vocal (forums and coments on news sites) and they are the once who often are enlisted to hel

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread Sander Steffann
Hi, > Should we again push our vendors for PCP/UPnP support? Sounds like a chicken&egg problem that needs to be solved. Applications won't implement PCP/UPnP support for IPv6 because no router is offering the service, and routers won't implement it because no application is going to use it. I

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread Benedikt Stockebrand
Hi Ragnar and list, as far as I can tell, little has changed at least in Germany since our last discussion on this (except that I've since sobered up again:-) I guess you won't be surprised that I still share the same opinion as Ted:-) So far all I've consciously seen on consumer CPEs is "per de

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread Tim Chown
Hi, Was this one of the questions asked in Jordi’s survey? I’m not sure I’ve seen the results published as yet, but he got a fantastic level of response (over 200 iirc)… Jordi? :) Tim > On 20 Sep 2016, at 13:44, Benedikt Stockebrand wrote: > > Hi Ragnar and list, > > as far as I can tell,

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread JORDI PALET MARTINEZ
No, didn’t included anything about security, unfortunately (now I realize having missed it !) I will consider upgrading the actual questions or making a specific one related to security … I’ve got already over 1.100 responses, and I’m waiting for Korean ISPs to start responding … I think is the

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread Tim Chown
Hi, Thanks Jordi. And yes, hindsight is always easy! It would be nice to have a survey report document online for anyone to read, to complement various powerpoint decks you’ve used. Amazing to get such a large response - well done :) Tim > On 20 Sep 2016, at 14:49, JORDI PALET MARTINEZ >

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread JORDI PALET MARTINEZ
I’ve promised an article to RIPE and APNIC … will work on it once I’ve the Korean data … hopefully in a couple of weeks … If somebody can help to disseminate the survey among Korean ISPs, please, let me know! In case someone in this list still didn’t responded, here is the link: http://survey.

Re: SV: CPE Residential IPv6 Security Poll

2016-09-20 Thread Ted Mittelstaedt
Erik, I think you have to follow these precepts (keep in mind this is an American capitalist perspective not a European cooperative socialist perspective) 1) You got the money, tell your vendors to either do what you want (put IPv6 UPnP in CPEs they sell you) or you are going to kick their a