question regarding over the counter devices

[JORDI PALET MARTINEZ]

What I’ve seen, yes is on by default, but I also heard the same complain, but actually never seen a device not-on by default … so I’m not really convinced is very real.

However, I believe that all the IPv6 OSs for hosts and servers, have the IPv6 firewall on by default, so this should not be a big issue, unless you have other devices with no IPv6 firewall (IP cameras?), which I think is not common, because those devices (what I’ve seen up to now), only respond to the port that they have designated to work on.

We had this debate several times in IETF I think …

There is some text about that in both RFC7084 (and bis that I’m working on https://tools.ietf.org/html/draft-palet-v6ops-rfc7084-bis-01) and RFC6092.

Regards,
Jordi
 

-----Mensaje original-----
De: <ipv6-ops-bounces+jordi.palet=consulintel.es at lists.cluenet.de> en nombre de Mikael Abrahamsson <swmike at swm.pp.se>
Organización: People's Front Against WWW
Responder a: <swmike at swm.pp.se>
Fecha: miércoles, 1 de marzo de 2017, 8:06
Para: <ipv6-ops at lists.cluenet.de>
Asunto: question regarding over the counter devices

    
    Hi,
    
    I just had a discussion with people from an ISP in the process of 
    implementing IPv6. They were afraid of turning on IPv6 for customers who 
    had purchased their own routers themselves, because these routers might 
    not have IPv6 firewalling on by default, thus exposing customers who used 
    to be "protected" by IPv4 NAT, to now be exposed with unfirewalled IPv6.
    
    So my question:
    
    Devices that people buy in electronics stores etc, do they even come with 
    IPv6 turned on by default?
    
    If they do, is firewalling turned on by default?
    
    My Apple Airport Express at least came with firewalling turned on, I don't 
    remember what the default setting was for IPv6 support. But if one turned 
    on IPv6 support, then one had to unclick the firewall clickbox to be able 
    to get incoming connections.
    
    I'm going to check the devices I have in my boxes here at home, but in the 
    mean time would appreciate if others could share their experiences.
    
    -- 
    Mikael Abrahamsson    email: swmike at swm.pp.se
    
    



**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.consulintel.es
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.