On 03/02/10 21:30, Wayne Stallwood wrote:
I think probably that would end up being the default configuration for any consumer grade router/gateway appliance much as it is now. You'd get people clicking the "allow everything, everywhere" button to try and get something working and mostly they will get exactly what they deserve :)
That's my point really: the "allow everything, everywhere" option isn't technically possible with NAT so people can't just enable it.
Installing a firewall correctly is just like using a USB modem on a desktop PC and configuring it so that your PC is safe: putting in a router is *much* safer and *much* less easy to break open by mistake or carelessness.
I'm not saying IPv6 is a bad thing. It's just that over the years I've become quite fond of NAT for the reasons above. When I need to work around it I can, but there's a big step from the default to the dangerous.
Once every script kiddy on the planet has emptied the trays on their network printer overnight a few times they will get the point.
Unfortunately we all get hit by this. ISPs take actions like blocking all traffic on certain ports because they can't trust their customers to do it, so even if you have a legitimate reason to open something up you'll find you can't.
Yes you just need to contact ipv6@enta.net to get it enabled for a new or existing connection and as Brett says, make sure you have ipv6 friendly equipment at your end.
OK, it looks like I have IPv6 unfriendly kit, so for the time being I'll go looking at tunneling options. This has the advantage of making it something I can play with at home.
Which consumer routers do support IPv6? I have a cheap router which runs RouterTech firmware but that doesn't seem to support IPv6.