Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #226930

Re: portsentry(1) and ipv6?

From Dan Ritter <dsr@randomstring.org>
Newsgroups linux.debian.user
Subject Re: portsentry(1) and ipv6?
Date 2020-09-12 14:10 +0200
Message-ID <AOcvT-bj-1@gated-at.bofh.it> (permalink)
References <AO7PA-5RS-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


John Conover wrote: 
> 
> Does portsentry(1) make any sense in systems with ipv6 connectivity?
> 

Yes and no. If you want to know that machines are scanning
ports, yes. If you want to effectively block IPs, no.

You can, of course, block well known IPv6 addresses -- I block
Google's DNS resolvers on my house network -- but it's not even
a trivial barrier for attackers.

-dsr-

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

portsentry(1) and ipv6? conover@rahul.net (John Conover) - 2020-09-12 09:10 +0200
  Re: portsentry(1) and ipv6? Dan Ritter <dsr@randomstring.org> - 2020-09-12 14:10 +0200
    Re: portsentry(1) and ipv6? Fabrice Bauzac <noon@mykolab.com> - 2020-09-13 07:40 +0200
      Re: portsentry(1) and ipv6? Dan Ritter <dsr@randomstring.org> - 2020-09-13 15:20 +0200

csiph-web