UPnP/IPv6 support in home routers?

Ole Troan otroan at employees.org
Tue Dec 12 11:31:37 CET 2017


>> one would want to be able to whitelist all ports
>> for a given IP address
> 
> What? No!
> 
> "Dear Gateway, I am definitely not a compromised host, please open all
> ports toward me."
> 
> I don't disregard the idea that one would want to manually configure
> this behaviour, but not automatically from the host itself.

Indeed. I find the argument that I must have a firewall, but I also must have a highly insecure way of automatically disabling it highly amusing.
(I guess PCP was what was intended to replace UPnP for this in IPv6.)

Best regards,
Ole
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 874 bytes
Desc: Message signed with OpenPGP
Url : http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20171212/b54d779e/attachment.bin 


More information about the ipv6-ops mailing list