top | item 45010694

(no title)

ta8645 | 6 months ago

If ipv6 ever becomes a thing, it'll make blocking all that much harder.

discuss

order

rnhmjoj|6 months ago

No, it's really the same thing with just different (and more structured) prefix lengths. In IPv4 you usually block a single /32 address first, then a /24 block, etc. In IPv6 you start with a single /128 address, a single LAN is /64, an entire site is usually /56 (residential) or /48 (company), etc.

Arnavion|6 months ago

Note that for the sake of blocking internet clients, there's no point blocking a /128. Just start at /64. Blocking a /128 is basically useless because of SLAAC.

withinboredom|6 months ago

Hmmm... that isn't my experience:

/128: single application

/64: single computer

/56: entire building

/48: entire (digital) neighborhood

snerbles|6 months ago

For ipv6 you just start nuking /64s and /48s if they're really rowdy.