UPnP/IPv6 support in home routers?
Ole Troan
otroan at employees.org
Tue Dec 12 11:31:37 CET 2017
>> one would want to be able to whitelist all ports
>> for a given IP address
>
> What? No!
>
> "Dear Gateway, I am definitely not a compromised host, please open all
> ports toward me."
>
> I don't disregard the idea that one would want to manually configure
> this behaviour, but not automatically from the host itself.
Indeed. I find the argument that I must have a firewall, but I also must have a highly insecure way of automatically disabling it highly amusing.
(I guess PCP was what was intended to replace UPnP for this in IPv6.)
Best regards,
Ole
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 874 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.cluenet.de/pipermail/ipv6-ops/attachments/20171212/b54d779e/attachment.sig>
More information about the ipv6-ops
mailing list