Subj : IPv6 service
To   : All
From : Markus Reschke
Date : Wed Aug 24 2016 16:19:40

Hello!

Some interesting observations from running an IPv4 and v6 enabled server.

We all know the bots running dictionary attacks against the ssh daemon. For IPv4 I usually run some rate limiting to thwart those damn bots. But I haven't seen any attempts via IPv6 yet. One could argue that the sheer number of addresses would explain that, most would think. Actually it's not the case, since new methods for IPv6 reconnaissance (mostly via DNS) exists. There are several papers on that topic.

The MTA logfiles reveal that only a very few MTAs use IPv6. Those are GMail,  a MTA for an IPv6 related mailing list, and two or three others. That's a little bit disappointing.

Regards,
Markus

--- 
 * Origin: *** theca tabellaria *** (2:240/1661)

.