[clug] IPv6 talks

[George at Clug]

    Thanks Bob.

Home automation sounds fun. Looking forward to being there.

As for IPv6, if the opportunity rises for some talks, please do.

If you know of any good links, then please forward to us (or me), as I
have searched a number of times and have not found anything that is
particularly useful for moving from low level IP knowledge to full on
working DNS/Firewall/Routing IPv6 skill level.

Thanks,

George.

At Tuesday, 10-11-2015 on 11:35 Bob Edwards wrote:


Hi George,

Happy to do a talk on IPv6, but looks like this months slot is taken.
December is usually a time for partying, don't know if we are planning
on a CLUG main meeting.
We could go for January, given that LCA 2016 is actually on in Feb...

In the meantime, as with all things techy, Wikipedia is your friend.

I have the slight advantage of having formally routed IPv6 addresses
at work via AARNet etc. I haven't tried playing with IPv6 at home yet.

I do have a machine at work which only talks IPv6 (have had it for
around 9 years now, in one guise or another). Without IPv4, the
Internet is a dark and barren landscape (hint: I needed to set up a
DNS server which talks IPv6 and an http proxy for APT (eg. squid) to
even install this machine!).

Things have improved a bit now. For example, the Australian
security.debian.org mirror, located a few metres from my office, talks
IPv6, but ftp.au.debian.org doesn't... mirror.aarnet.edu.au does IPv6
(but it's debian repositories are often "behind"). etc.

cheers,

Bob Edwards.

On 10/11/15 06:27, George at Clug wrote:
>      Hi Bob, what is scheduled for this coming CLUG meeting?
>
> Are you able to give a talk on IPv6 ?  IPv6 is becoming quite
> important for anyone running servers on a network.
>
> If you have any material you can pass on, please do, I can do some
> pre-reading.
>
> My suggested topic list
> 1) Basic understanding of IPv6
>
> 2) Testing/verifying IPv6 traffic (e.g. prove effectiveness of
> firewalls)
>
> 3) IPv6 Firewall
>
> 4) BIND9 configuration for IPv6
>
> 5) IPv6 routing
>
> _IPv6 appears to have it challenges, and from my reading many
systems
> are not fully Pv6 capable._
>
> Are you aware of security issues related to systems not managing
IPv6
> correctly?  For example firewalls that inadvertently allow IPv6 to
> traverse because they don't know how to block or manage IPv6 ?
>
> I have used Smoothwall for some time now, it is a great IPv4
firewall
> appliance that provides an effective IPv4 DMZ, but Smoothwall does
not
> manage IPv6.  Do you know of any firewalls that provide DMZ and
> manage IPv6 ?
>
>
>
-----------------------------------------------------------------------
>
http://smoothwall.uservoice.com/forums/145832-smoothwall/suggestions/10406706-ipv6-support
> Any and all ideas and feedback for Smoothwall - IPv6 Support
> 2015 and no IPv6 support... Like it or not IPv6 is here... and we
use
> it! Please develop support
>
>
>
>
https://wiki.debian.org/DebianFirewall#Using_ip6tables_for_IPv6_traffic
> Because of growth, Internet is slowly switching to IPv6, that has a
> much larger address space than IPv4, and Debian is IPv6 capable.
>
>
>
> http://shorewall.net/IPv6Support.html
> Shorewall6 Differences from Shorewall
>
> Configuring and operating Shorewall6 is very similar to configuring
> Shorewall with some notable exceptions:
>
> No NAT
>
>      In Shorewall6, there is no NAT of any kind (Netfilter6
doesn't
> support any form of NAT). Most people consider this to be a giant
step
> forward.
>
>      When an ISP assigns you an IPv6 address, you are actually
> assigned an IPv6 prefix (similar to a subnet). A 64-bit prefix
defines
> a subnet with 4 billion hosts squared (the size of the IPv4 address
> space squared). Regardless of the length of your prefix, you get to
> assign local addresses within that prefix.
>
>
>
>
>
>
>


-- 
linux mailing list
linux at lists.samba.org
https://lists.samba.org/mailman/listinfo/linux