Re: Pointer for documentation on actually delivering IPv6

2010-12-12 Thread Joel Jaeggli
On 12/6/10 6:55 AM, Jared Mauch wrote: On Dec 6, 2010, at 8:35 AM, Jeff Johnstone wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date indicates no

Re: Pointer for documentation on actually delivering IPv6

2010-12-09 Thread Joel Jaeggli
On 12/6/10 5:35 AM, Jeff Johnstone wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date indicates no support, nor any planned support in upcoming releases.

RE: Pointer for documentation on actually delivering IPv6

2010-12-09 Thread George Bonser
Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date indicates no support, nor any planned support in upcoming releases. Any info would be helpful.

Re: Pointer for documentation on actually delivering IPv6

2010-12-09 Thread Wil Schultz
On Dec 9, 2010, at 9:39 PM, George Bonser wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date indicates no support, nor any planned support in

Re: Pointer for documentation on actually delivering IPv6

2010-12-09 Thread Pete Carah
On 12/10/2010 12:52 AM, Wil Schultz wrote: On Dec 9, 2010, at 9:39 PM, George Bonser wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date indicates no

Re: Pointer for documentation on actually delivering IPv6

2010-12-07 Thread david raistrick
On Mon, 6 Dec 2010, Owen DeLong wrote: Seriously, though, you're welcome to use fd00::/8 for exactly that purpose. The problem is that you (and hopefully it stays this way) won't have much luck finding a vendor that will provide the NAT for you to do it with. [with my flame-retardant hat

Re: Pointer for documentation on actually delivering IPv6

2010-12-07 Thread Chuck Anderson
On Tue, Dec 07, 2010 at 08:18:31AM -0500, david raistrick wrote: On Mon, 6 Dec 2010, Owen DeLong wrote: Seriously, though, you're welcome to use fd00::/8 for exactly that purpose. The problem is that you (and hopefully it stays this way) won't have much luck finding a vendor that will

Re: Pointer for documentation on actually delivering IPv6

2010-12-07 Thread Owen DeLong
On Dec 7, 2010, at 6:05 AM, Chuck Anderson wrote: On Tue, Dec 07, 2010 at 08:18:31AM -0500, david raistrick wrote: On Mon, 6 Dec 2010, Owen DeLong wrote: Seriously, though, you're welcome to use fd00::/8 for exactly that purpose. The problem is that you (and hopefully it stays this way)

Re: Pointer for documentation on actually delivering IPv6

2010-12-07 Thread Joel Jaeggli
On 12/7/10 5:18 AM, david raistrick wrote: On Mon, 6 Dec 2010, Owen DeLong wrote: Seriously, though, you're welcome to use fd00::/8 for exactly that purpose. The problem is that you (and hopefully it stays this way) won't have much luck finding a vendor that will provide the NAT for you to

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Chris Nicholls
On Saturday, 4 December 2010 at K:40:50 -0500, Mark Radabaugh wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a ISP is supposed to handle routing

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Dobbins, Roland
On Dec 6, 2010, at 6:43 PM, Chris Nicholls wrote: I found the following very helpful, Hardest thing for me was nailing DHCPv6-PD without an DHCP server :) This is the best/most complete work on IPv6 security to date, IMHO: http://www.ciscopress.com/bookstore/product.asp?isbn=1587055945

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Jeff Johnstone
On Mon, Dec 6, 2010 at 5:27 AM, Dobbins, Roland rdobb...@arbor.net wrote: On Dec 6, 2010, at 6:43 PM, Chris Nicholls wrote: I found the following very helpful, Hardest thing for me was nailing DHCPv6-PD without an DHCP server :) This is the best/most complete work on IPv6 security to

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Jared Mauch
On Dec 6, 2010, at 8:35 AM, Jeff Johnstone wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date indicates no support, nor any planned support in upcoming

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Owen DeLong
On Dec 6, 2010, at 6:55 AM, Jared Mauch wrote: On Dec 6, 2010, at 8:35 AM, Jeff Johnstone wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost all the info I've managed to find to date

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Jack Bates
On 12/6/2010 9:07 AM, Owen DeLong wrote: Seriously, though, you're welcome to use fd00::/8 for exactly that purpose. The problem is that you (and hopefully it stays this way) won't have much luck finding a vendor that will provide the NAT for you to do it with. Corporate IT community

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Joe Greco
First, let's clarify things a bit. I don't think unintended routing is = what concerns your IT guys. Afterall, even with the NAT box today, there's routing from the outside to the inside. It's just = controlled by stateful inspection. It might be better stated differently. With NAT, routing

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Dobbins, Roland
On Dec 6, 2010, at 10:49 PM, Jack Bates wrote: So does NAT add to security? Yes; just not very much. It adds nothing which can't be added in another, better way, and it subtracts a great deal in terms of instantiating unnecessary DoSable stateful chokepoints in the network, not to mention

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Truman Boyes
On 6 Dec 2010, at 11:07 PM, Owen DeLong wrote: On Dec 6, 2010, at 6:55 AM, Jared Mauch wrote: On Dec 6, 2010, at 8:35 AM, Jeff Johnstone wrote: Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business? Almost

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread Bill Fehring
On Sat, Dec 4, 2010 at 19:52, Ben Jencks b...@bjencks.net wrote: DHCPv6-PD (prefix delegation) with the relay installing static routes is probably the most straightforward way. Apparently that has it's own problems right now actually:

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread Miquel van Smoorenburg
In article xs4all.aanlktin5aoqklbixfn9elnpodlbcdxn1e0ati7wbu...@mail.gmail.com you write: On Sat, Dec 4, 2010 at 19:52, Ben Jencks b...@bjencks.net wrote: DHCPv6-PD (prefix delegation) with the relay installing static routes is probably the most straightforward way. Apparently that has it's

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread James Hess
On Sat, Dec 4, 2010 at 9:40 PM, Mark Radabaugh m...@amplex.net wrote: of running RIPng.  The thought of letting Belkin routers (if you can call them that) into the routing table scares me no end. I think that indeed looks scary. I wouldn't be too concerned about the Belkin routers. How many SP

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread Mark Newton
On 06/12/2010, at 6:54 AM, Bill Fehring wrote: Apparently that has it's own problems right now actually: http://blog.ioshints.info/2010/10/dhcpv6-relaying-another-trouble-spot.html In our deployment mode, the CEs are running PPP sessions to the BRAS, so they know when it reboots and can

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread Miquel van Smoorenburg
In article xs4all.aanlktikm-=0xt8kjv0_0gbc7fzxofobn+fh8oil6v...@mail.gmail.com you write: If there is an inexpensive CPE with an implementation of DHCPv6 PD that works without issues, I would love to hear about who makes it, and what the device is... AVM Fritzbox 7270/7340/7390 Draytek Vigor

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread Owen DeLong
On Dec 5, 2010, at 1:32 PM, James Hess wrote: On Sat, Dec 4, 2010 at 9:40 PM, Mark Radabaugh m...@amplex.net wrote: of running RIPng. The thought of letting Belkin routers (if you can call them that) into the routing table scares me no end. I think that indeed looks scary. I wouldn't be

Re: Pointer for documentation on actually delivering IPv6

2010-12-05 Thread MarcoH - lists
On 5 dec 2010, at 23:19, Miquel van Smoorenburg wrote: In article xs4all.aanlktikm-=0xt8kjv0_0gbc7fzxofobn+fh8oil6v...@mail.gmail.com you write: If there is an inexpensive CPE with an implementation of DHCPv6 PD that works without issues, I would love to hear about who makes it, and

Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Mark Radabaugh
Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a ISP is supposed to handle routing to residential consumer networks. I have seen suggestions of running

Re: Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Mike
On 12/04/2010 07:40 PM, Mark Radabaugh wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a ISP is supposed to handle routing to residential consumer

Re: Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Ben Jencks
On Sat, Dec 4, 2010 at 22:40, Mark Radabaugh m...@amplex.net wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint.  I have seen very little with respect to how a ISP is supposed to handle routing to

Re: Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Mark Radabaugh
On 12/4/10 10:52 PM, Ben Jencks wrote: On Sat, Dec 4, 2010 at 22:40, Mark Radabaughm...@amplex.net wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a

Re: Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Matthew Moyle-Croft
On 05/12/2010, at 2:29 PM, Mark Radabaugh wrote: On 12/4/10 10:52 PM, Ben Jencks wrote: On Sat, Dec 4, 2010 at 22:40, Mark Radabaughm...@amplex.net wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network

Re: Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Mark Smith
On Sat, 04 Dec 2010 22:40:50 -0500 Mark Radabaugh m...@amplex.net wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a ISP is supposed to handle

Re: Pointer for documentation on actually delivering IPv6

2010-12-04 Thread Mark Smith
On Sat, 04 Dec 2010 22:40:50 -0500 Mark Radabaugh m...@amplex.net wrote: Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a ISP is supposed to handle