Published on: 2025-06-27 20:17:29
Should I block ICMP? No!! The Problem Many network administrators feel that ICMP is a security risk, and should therefore always be blocked at the firewall. It is true that ICMP does have some security issues associated with it, and that a lot of ICMP should be blocked. But this is no reason to block all ICMP traffic! ICMP has many important features; some are useful for troubleshooting, while some are essential for a network to function correctly. Here are details of some
Keywords: code0 echo icmp ipv6 network
Find related items on AmazonPublished on: 2025-06-27 03:04:14
A few years ago, I wrote about how 'sort -V' can sort IPv4 addresses into their natural order for you. Even back then I was smart enough to put in that 'IPv4' qualification and note that this didn't work with IPv6 addresses, and said that I didn't know of any way to handle IPv6 addresses with existing command line tools. As far as I know, that remains the case today, although you can probably build a Perl, Python, or other language program that does such sorting for you if you need to do this re
Keywords: addresses ipv6 need numbers sort
Find related items on AmazonPublished on: 2025-07-17 22:59:25
This adventures starts with a simple eBPF program to transparently redirect DNS requests on port 53 for a single program (or docker container). To do this I used BPF_CGROUP_INET4_CONNECT on a cgroup . That lets me inspect and redirect traffic when syscall.connect occurs from within the cgroup . Here is a simplified version 👇 int handle_connect_redirect ( struct bpf_sock_addr * ctx , __be32 original_ip , bool is_connect4 , struct redirect_result * result ) { __be32 new_ip = original_ip ; __be16
Keywords: address ctx ebpf ipv4 ipv6
Find related items on AmazonPublished on: 2025-07-31 16:33:42
A China-aligned APT threat actor named "TheWizards" abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. According to ESET, the group has been active since at least 2022, targeting entities in the Philippines, Cambodia, the United Arab Emirates, China, and Hong Kong. Victims include individuals, gambling companies, and other organizations. The attacks utilize a custom tool dubbed "Spellbinder" by ESET that a
Keywords: attacks eset ipv6 spellbinder tool
Find related items on AmazonPublished on: 2025-10-01 09:07:16
This post does not reflect the views on current, past or future employers. The opinions in this article are my own. This is a series of articles of my musings on why IPv6 failed. Previous article. Most networking protocols over the history of computer networking has failed. What makes up a successful protocol is defined in RFC5218. Personally I have worked on IPv6 standardisation and implementations since 1998. 27 years wasted then. At least I can claim to have learnt something along the way.
Keywords: address addresses ipv4 ipv6 local
Find related items on AmazonPublished on: 2025-11-02 18:54:30
!! NOTICE !! Notice: The owner of ip4.me/ip6.me, Kevin Loch, passed away. The Kevin M Loch Estate will be shutting down Kevin's websites in the near future (4/1/2025). Inquiries for purchasing Kevin's domains may be sent to [email protected]. Click this link to continue to your ip4/ip6 address reporting Website List of Websites impacted: ip4.me, ip4only.me ip6addr.com, ip6addr.net, ip6addr.org ip6.me, ip6only.me ipv6addr.com, ipv6addr.net, ipv6addr.org onlyip4.me, onlyip6.me whatis
Keywords: com ipv6addr kevin net org
Find related items on AmazonPublished on: 2025-11-03 18:54:30
!! NOTICE !! Notice: The owner of ip4.me/ip6.me, Kevin Loch, passed away. The Kevin M Loch Estate will be shutting down Kevin's websites in the near future (4/1/2025). Inquiries for purchasing Kevin's domains may be sent to [email protected]. Click this link to continue to your ip4/ip6 address reporting Website List of Websites impacted: ip4.me, ip4only.me ip6addr.com, ip6addr.net, ip6addr.org ip6.me, ip6only.me ipv6addr.com, ipv6addr.net, ipv6addr.org onlyip4.me, onlyip6.me whatis
Keywords: com ipv6addr kevin net org
Find related items on AmazonGo K’awiil is a project by nerdhub.co that curates technology news from a variety of trusted sources. We built this site because, although news aggregation is incredibly useful, many platforms are cluttered with intrusive ads and heavy JavaScript that can make mobile browsing a hassle. By hand-selecting our favorite tech news outlets, we’ve created a cleaner, more mobile-friendly experience.
Your privacy is important to us. Go K’awiil does not use analytics tools such as Facebook Pixel or Google Analytics. The only tracking occurs through affiliate links to amazon.com, which are tagged with our Amazon affiliate code, helping us earn a small commission.
We are not currently offering ad space. However, if you’re interested in advertising with us, please get in touch at [email protected] and we’ll be happy to review your submission.