Re: CPE Residential IPv6 Security Poll

2016-09-27 Thread Sander Steffann
Hi, > For what it's worth, the Swisscom approach seems sensible to me. At > least if I understand it correctly, in that they by default only block > ports associated with application protocols known to be insecure, meant > for home network use only, etc. All other ports and protocols not on > the

Re: Re: Re: CPE Residential IPv6 Security Poll

2016-09-27 Thread Mikael Abrahamsson
On Mon, 26 Sep 2016, Ted Mittelstaedt wrote: Well there is an answer to that. Instead of paying your development team to do a from-scratch build, you can just have them port over dd-wrt or openwrt. Both of these router firmwares are most likely tremendously advanced over anything your CPE

Re: CPE Residential IPv6 Security Poll

2016-09-26 Thread Nick Hilliard
Lorenzo Colitti wrote: > Surely there's got to be a better solution here than > lowest-common-denominator engineering, a.k.a., "design your product for > your least knowledgeable customer"? sensible secure defaults for grandma + "Advanced" tab on CPE configuration page for 10yo grandchild? Nick

Re: CPE Residential IPv6 Security Poll

2016-09-24 Thread Valve Store Support
Hello,    Thank you for your email. Are you referring to an order placed at the Valve Store? If this is regarding an in-game issue we kindly ask that you contact Steam Support directly as we are unable to help with any inquiries not regarding orders placed on http://valvestore.welovefine.com/.

Re: CPE Residential IPv6 Security Poll

2016-09-20 Thread JORDI PALET MARTINEZ
CC: Benedikt Stockebrand <b...@stepladder-it.com>, IPv6 Ops list <ipv6-ops@lists.cluenet.de>, "Anfinsen, Ragnar" <ragnar.anfin...@altibox.no> Asunto: Re: CPE Residential IPv6 Security Poll Hi, Thanks Jordi. And yes, hindsight is always easy! It would be

Re: CPE Residential IPv6 Security Poll

2016-09-19 Thread Bjørn Mork
Ted Mittelstaedt writes: > This kind of mirrors the "default" security policy on IPv4 CPEs (since > those CPE's have NAT automatically turned on which creates a "block in, > permit out" kind of approach.) so I'm not sure why you would want to > default it to being different for

Re: CPE Residential IPv6 Security Poll

2016-09-19 Thread Ted Mittelstaedt
When we were still doing DSL I brought IPv6 online, but the only way our customers could access it was to have the DSL modem/CPE in bridged mode, and run their own router which was IPv6 compliant. Thus the "CPE" security policy was whatever the router vendor defaulted. Our observation was

Re: CPE Residential IPv6 Security Poll

2016-09-19 Thread Tarko Tikan
hey, I guess none of the users know they are using IPv6 around 75-80% of the time internal, or 20-30% on their external traffic either:-) Indeed. I've been spreading knowledge about our deployment to our customers and most of them have been amazed that they had no idea :) But they have

Re: CPE Residential IPv6 Security Poll

2016-09-19 Thread Roger Jørgensen
On Mon, 19 Sep 2016 12:32:27 +, Anfinsen, Ragnar wrote: Hi all. In light of a new discussion blossoming in Norway, we are curious about the IPv6 security policy different ISP’s has adopted. So it would be very helpful if you could do a quick response, either here or directly to me, on the