Re: IPv6 intruders

Alcides wrote:
When I was reading about China's Next Generation Internet project, I
came across something interesting:
It reads as following
"Your Hidden IPv6 Network"
Are you building an IPv6 network without even knowing it?
If you've bought any new network equipment over the past few years,
then chances are yes. >Most commercially available routers and
switches recognize both IPv4 and IPv6 traffic, as >do Windows, Linux
and Mac OS. But that doesn't mean your network is IPv6 ready—that
would require a full network redesign. Meanwhile, don't ignore the
IPv6 capabilities you may >already have. Most applications, including
network monitoring software, won't register a user >connecting with an
IPv6 address, making it possible for hackers to enter the network
undetected. Disable the IPv6 capabilities wherever possible until you
are ready for the >transition.

I came across this at the following link:
http://www.cio.com/archive/071506/china.html?page=2

Now I would like to know your opinion on this.

Warm regards,

---------------------------------------------------------------------------

This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



this does not give much information with regards to your statement on undetected ipv6 "hackers". Do you know of any methodology or implemented attacks ? Incidents? You cant just throw something at a list like that. Which networking devices are vulnerable to such an attack?

Plus you'd have to be able to route traffic to an ipv6 destination to do that and there are plenty of providers and backbone routers that are not ipv6.

Please provide more information if you wish to be supported on your topic...


Regards,
Mario A. Spinthiras

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: IPv6 in FC4 - How
    ... though the configuration defaults to "no", ... Listing routes is something like "ip -6 route ls". ... etc, etc, etc) already understand IPv6 and may (for the servers at ... and restart your network so it gets properly configured. ...
    (Fedora)
  • [fw-wiz] ***SPAM*** Re: IPv6 support in firewalls
    ... Marcus, a proposal nearly identical to what you suggest was one of the first presented at the IETF in the mid-1990s. ... Over a decade later, and we've bent, twisted, tunneled, re-mapped, stretched, and NAT'd IPv4 until it does everything IPv6 promised - and now, all IPv6 brings to the table is a bigger field for addresses and an ungainly, unwanted and arguably unwarrantable transition scenario. ... Oh, for the record, I was one of the folks who wrote OSI's network protocol. ...
    (Firewall-Wizards)
  • Re: [fw-wiz] IPv6 and IPSec
    ... >> Now, as a system administrator, how are you going to track down a virus ... network to network). ... Nice thing is that, with IPv6, you can have ... up an IPv6 tunnel back out that slid right past all the IDS they had. ...
    (Firewall-Wizards)
  • Re: RADIUS for MAC authentication in WLAN, how doing it?
    ... > the first two decades of widespread IPv6 use. ... one of the most harmful services provided by this network ... After configuring NetBSD to connect to Freenet6: ... > Nowadays any router worth its salt can deal with any CIDR subnet. ...
    (comp.unix.bsd.netbsd.misc)
  • IPv6 intruders
    ... Are you building an IPv6 network without even knowing it? ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)