IPv6-misconfigurations

[Jens Link]

Thomas Schäfer <thomas at cis.uni-muenchen.de> writes:

> Hi,
>
> I am observing sometimes very strange ipv6-misconfigurations.

My theory: People enable IPv6 for a service, test it and when it works
forget about it. Many times they forget to monitor services and don't
notice that the service is not working anymore. Or there are different
teams for services, OS, firewalls, DNS, monitoring they don't talk to
each other. Or there is a new admin / manager / ... who doesn't like
IPv6. 

DNSSEC is even more fun when not monitored. 

- If you are running a service and not monitoring it do you relay need
  this service? If you run dual-stack service monitor both protocols

- Dual-stack your admin workstations IPv6 so you can notice IPv6
  problems.

- Talk to each other. Yes it's hard sometimes.

Jens

P.S.: If anyone needs HTTP / SMTP / DNS(SEC) monitoring for an Open
      Source Project: Drop me a note. My monitoring hosts are bored. 
-- 
----------------------------------------------------------------------------
| Foelderichstr. 40   | 13595 Berlin, Germany           | +49-151-18721264 |
| http://blog.quux.de | jabber: jenslink at quux.de        | ---------------  | 
----------------------------------------------------------------------------