ipv6 question!

[Karl Auer]

On Sun, 2009-05-31 at 23:08 +0200, Michael Casey wrote:
> If I would have an IPv6 address [home pc, behind a router - supporting
> ipv6 e.g.: openwrt, ISP gives ipv6], then I can see an IPv6 address
> with ifconfig, on the PC e.g.: "Z"
> So that's my "very unique address". - "Z"
> 
> Can that be "seen on the internet", the "Z" address? so anyone can
> ping me from outside, or do an nmap?

It can be "seen on the Internet", but it will only be pingable or
nmappable if you want it to be.

> Or are there private addresses what the router gives to my pc.: eg.:
> with ipv4 a router could give 192.168.1.10... and that IP couldn't be
> pinged/nmapped from outside (More Secure???)
> Because I heard that there will be no NAT with IPv6?

There are no "private addresses" any more, at least not in the sense you
mean. Your IPv6 addresses will be global.

However, that *doesn't* mean they are necessarily pingable, nmappable or
anything else, not unless you want them to be. A simple packet filter
will stop that (and more besides).

> What will happen to e.g.: a windows xp pc using IPv6? The "C$, D$....
> shares" will be visible to anyone if they know the password?

Only if you leave them visible.

You can block these things at each host, or block them at your router. I
strongly expect that commodity IPv6 routers will have suitable defaults
that will mimic NAT:

   - let anything out
   - let established and related back in
   - block everything else

That's basically what you need on the outside interface of your OpenWRT
router. Or on your hosts.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)                   +61-2-64957160 (h)
http://www.biplane.com.au/~kauer/                  +61-428-957160 (mob)

GPG fingerprint: 07F3 1DF9 9D45 8BCD 7DD5 00CE 4A44 6A03 F43A 7DEF
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20090601/2c3223ab/attachment.sig>