+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] IPv6 and the Firewall (/showthread.php?tid=5495337)
[Tutorial] IPv6 and the Firewall - slober - Dec 16, 2016
IPv6 and the Firewall
More and more services are enabling IPv6.
More and more ISP's are supporting it to their end users.
And you should to!
Pro: Much Larger Address Space
Pro: Virtually Unlimited Host Addresses per Prefix
Pro: Stateless Autoconfig
Draw: No More IP Scanning
Please check the sources for more information about IPv6
Sources:
packetlife.net
Wikipedia.org
Long story short. You don't need to portforward in IPv6
Why? Cause your ISP will give you a /64 prefix 2 to the power of 64 IPv6 adresses.
Code
18 446 744 073 709 551 616 adressesThis is my IPv6 subnet.
Spoiler (Click to View)
![[Image: d7d4b18c4cb74a9aad8ca2fe82e3e3b6.png]](https://s30.postimg.org/gcrjntdb5/d7d4b18c4cb74a9aad8ca2fe82e3e3b6.png)
So you don't really need to port-forward. But there still is a Firewall that you'll need to configure.
You'll most likely get a screen like this or with similar options.
Spoiler (Click to View)
![[Image: Screenshot_19.png]](https://s24.postimg.org/mdti7v811/Screenshot_19.png)
naam firewall rule: GIVE_A_NAME_TO_RULE
Protocol: chose between TCP, TCP&UDP, ANY or ICMPv6 (pings)
Source: could be a single host or ANY
Port of range: -->
accessing a service:
Just type the port of your service
Ex. You want to access ssh on server X give in port 22
Offering a service
just type 1024:65535
Ex. You want to offer SSH to another client on the interwebs give in 1024:65535
Sounds weird right?
It isn't. When you make a connection to another service you assign a dynamic port to your computer for establishing that connection.
Sources:
https://support.microsoft.com/en-us/kb/929851
https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
https://en.wikipedia.org/wiki/Port_(computer_networking)
Destination: Host
IP-adres: GIVE_IN_YOUR_IPv6
port of range:
accessing a service:
1024:65535
offering a service:
Ex. SSH --> 22
Mode:
Accept
open up the firewall 🙂
Drop
Drop everything close the firewall nothing will get through send no response 👹
Block
Block the packet but your nice and send a reply to the client that the packet is being blocked 🎉
Sources:
Drop vs Reject