CPE Residential IPv6 Security Poll
Tim Chown
Tim.Chown at jisc.ac.uk
Tue Sep 20 14:50:32 CEST 2016
Hi,
Was this one of the questions asked in Jordi’s survey? I’m not sure I’ve seen the results published as yet, but he got a fantastic level of response (over 200 iirc)… Jordi? :)
Tim
> On 20 Sep 2016, at 13:44, Benedikt Stockebrand <bs at stepladder-it.com> wrote:
>
> Hi Ragnar and list,
>
> as far as I can tell, little has changed at least in Germany since our
> last discussion on this (except that I've since sobered up again:-)
>
> I guess you won't be surprised that I still share the same opinion as
> Ted:-)
>
> So far all I've consciously seen on consumer CPEs is "per default, allow
> all outbound, block all inbound". I'm not sure if there are any ultra
> cheap CPEs out that don't even let users configure inbound rules, but
> I've never had the need to deal with anything like that.
>
> However, one rather interesting thing has changed here: Since August
> this year, ISPs can by law no longer force their customers in Germany to
> use the CPE they provide. The implications here are yet to appear, but
> one possible effect might be that the ISPs move away from the
> all-features-you-never-wanted-plus-some-extra CPEs they so far forced on
> their customers to minimalistic devices they can just manage via TR-069
> or similar (reaching a setup similar ot the old NT1/NT2 split with ISDN
> in Europe), eventually leaving the filtering to the end user again.
>
> With business customers the range obviously goes from "consumer grade is
> good enough so why use anything else" for small businesses to dark fiber
> for customers running their own AS.
>
>
> Cheers,
>
> Benedikt
>
> --
> Benedikt Stockebrand, Stepladder IT Training+Consulting
> Dipl.-Inform. http://www.stepladder-it.com/
>
> Business Grade IPv6 --- Consulting, Training, Projects
>
> BIVBlog---Benedikt's IT Video Blog: http://www.stepladder-it.com/bivblog/
>
More information about the ipv6-ops
mailing list