[p2p-hackers] IPv6 and NAT

[Justin Cormack]

On 20 May 2005, at 04:18, larytet.8753341 at bloglines.com wrote:

> "Given that l33t hackers are already giving owned machines ipv6  
> addresses
> anyway..."
>
> i have IPv6 address on my machine. i am behind NAT and firewall
> and can do nothing besides testing between two PCs connected to the  
> same LAN.
> i understand that without tunnel in the NAT (static one to one) i  
> can not
> do much with IPv6. am i right ?

Have you got real IPv6 addresses or just the link local ones that  
most OSs install now?

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         inet6 fe80::211:24ff:fe7f:aa3c%en0 prefixlen 64 scopeid  
0x4      <-----------------------------------link local address
         inet6 2001:1b40:3:1:211:24ff:fe7f:aa3c prefixlen 64  
autoconf      <-----------------------------------real ipv6 address
         inet 10.0.0.200 netmask 0xffffff00 broadcast 10.0.0.255
         ether 00:11:24:7f:aa:3c

The link local addresses (start fe....) are not routed. Ask your ISP  
for a ipv6 /48 assignment to get real addresses, or use a tunnel  
(available for free in most places).

It is possible that your firewall filters all ipv6 traffic, but  
unlikely.

Justin