[clug] IPv6 talks
bob at cs.anu.edu.au
Tue Nov 10 00:35:39 UTC 2015
Happy to do a talk on IPv6, but looks like this months slot is taken.
December is usually a time for partying, don't know if we are planning
on a CLUG main meeting.
We could go for January, given that LCA 2016 is actually on in Feb...
In the meantime, as with all things techy, Wikipedia is your friend.
I have the slight advantage of having formally routed IPv6 addresses
at work via AARNet etc. I haven't tried playing with IPv6 at home yet.
I do have a machine at work which only talks IPv6 (have had it for
around 9 years now, in one guise or another). Without IPv4, the
Internet is a dark and barren landscape (hint: I needed to set up a
DNS server which talks IPv6 and an http proxy for APT (eg. squid) to
even install this machine!).
Things have improved a bit now. For example, the Australian
security.debian.org mirror, located a few metres from my office, talks
IPv6, but ftp.au.debian.org doesn't... mirror.aarnet.edu.au does IPv6
(but it's debian repositories are often "behind"). etc.
On 10/11/15 06:27, George at Clug wrote:
> Hi Bob, what is scheduled for this coming CLUG meeting?
> Are you able to give a talk on IPv6 ? IPv6 is becoming quite
> important for anyone running servers on a network.
> If you have any material you can pass on, please do, I can do some
> My suggested topic list
> 1) Basic understanding of IPv6
> 2) Testing/verifying IPv6 traffic (e.g. prove effectiveness of
> 3) IPv6 Firewall
> 4) BIND9 configuration for IPv6
> 5) IPv6 routing
> _IPv6 appears to have it challenges, and from my reading many systems
> are not fully Pv6 capable._
> Are you aware of security issues related to systems not managing IPv6
> correctly? For example firewalls that inadvertently allow IPv6 to
> traverse because they don't know how to block or manage IPv6 ?
> I have used Smoothwall for some time now, it is a great IPv4 firewall
> appliance that provides an effective IPv4 DMZ, but Smoothwall does not
> manage IPv6. Do you know of any firewalls that provide DMZ and
> manage IPv6 ?
> Any and all ideas and feedback for Smoothwall - IPv6 Support
> 2015 and no IPv6 support... Like it or not IPv6 is here... and we use
> it! Please develop support
> Because of growth, Internet is slowly switching to IPv6, that has a
> much larger address space than IPv4, and Debian is IPv6 capable.
> Shorewall6 Differences from Shorewall
> Configuring and operating Shorewall6 is very similar to configuring
> Shorewall with some notable exceptions:
> No NAT
> In Shorewall6, there is no NAT of any kind (Netfilter6 doesn't
> support any form of NAT). Most people consider this to be a giant step
> When an ISP assigns you an IPv6 address, you are actually
> assigned an IPv6 prefix (similar to a subnet). A 64-bit prefix defines
> a subnet with 4 billion hosts squared (the size of the IPv4 address
> space squared). Regardless of the length of your prefix, you get to
> assign local addresses within that prefix.
More information about the linux