avatarTeri Radichel

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

3770

Abstract

time soon, nor do they need the extra complexity.</p><div id="98d3" class="link-block"> <a href="https://readmedium.com/disabling-ipv6-on-a-mac-fce45a19885a"> <div> <div> <h2>Disabling IPv6 on a Mac</h2> <div><h3>Reducing the attack service by disallowing network access via IPv6</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*ttBtPXpQnCXZ8hcmXigr2g.png)"></div> </div> </div> </a> </div><p id="367f">Better yet, disable anything you don’t need running.</p><div id="db2c" class="link-block"> <a href="https://readmedium.com/updated-startup-script-for-disabling-unnecessary-services-on-a-mac-1155fddea690"> <div> <div> <h2>Updated Startup Script for Disabling Unnecessary Services on a Mac</h2> <div><h3>Hunting down more things to disable on a Mac</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*3EYeYEJqOAJ8_OVYcLsWRg.png)"></div> </div> </div> </a> </div><p id="5c27"><b>Disable IPv6 on PFSense</b></p><p id="2e17">In this post I explain how to disable IPv6 on PFSense. Your firewall of choice likely has similar options.</p><div id="1c0b" class="link-block"> <a href="https://readmedium.com/disable-ipv6-on-pfsense-e9e80fa656fb"> <div> <div> <h2>Disable IPv6 on PFSense</h2> <div><h3>If you don’t need IPv6 you can disable it to simplify network management</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*y2H8FV1vOGrAl2_fSAs_xg.png)"></div> </div> </div> </a> </div><p id="898a"><b>Working around an IPv6 DNS limitation</b></p><p id="86c4">In this post, a particular update process at AWS was trying to force use of IPv6. However, upon inspecting the update service for Ubuntu, it supports IPv4 and IPv6. I had to perform a work around to get to the update service with IPv4 so I didn’t have to open up IPv6 in my network rules. I hope AWS fixes this. #awswishlist</p><div id="5c2b" class="link-block"> <a href="https://readmedium.com/installing-aws-cli-on-ec2-arm-ubuntu-unsuccessful-so-far-52e0daf95aac"> <div> <div> <h2>Installing AWS CLI on EC2 ARM Ubuntu</h2> <div><h3>Troubleshooting command line install</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*cwHCaDSWbZY2xwMbqoVWSg.png)"></div> </div> </div> </a> </div><p id="5097"><b>IPv4 vs. IPv6</b></p><p id="adb8">In this post I cover some of the pros and cons of IPv4 vs. IPv6, when I would use IPv6, and how.</p><div id="97e1" class="link-block"> <a href="https://readmedium.com/how-to-inspect-network-traffic-258cea0c4727"> <div> <div> <h2>How to Inspect Network Traffic</h2> <div><h3>A few tips on finding what matters on your home network</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.re

Options

admedium.com/v2/resize:fit:320/1*VOP9Q_hJYiXkLSiv3V5zxw.png)"></div> </div> </div> </a> </div><p id="a3cd"><b>IPv6 and Ubuntu security updates</b></p><div id="67c3" class="link-block"> <a href="https://readmedium.com/ubuntu-apt-get-update-on-aws-ec2-ubuntu-presumes-ipv6-dc2cb4051d9c"> <div> <div> <h2>Ubuntu apt-get update on AWS EC2 Ubuntu Presumes IPv6</h2> <div><h3>Please stop doing this as it may prevent unsuspecting users from getting security updates</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><div id="1448" class="link-block"> <a href="https://readmedium.com/aws-ses-using-ipv6-may-result-in-your-messages-going-to-spam-e0ec2606196e"> <div> <div> <h2>AWS SES Using IPv6 May Result in Your Messages Going to Spam</h2> <div><h3>Check your SPF and related records to make sure they have all the necessary entries</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><div id="4928" class="link-block"> <a href="https://readmedium.com/pfsense-doesnt-let-you-specify-0-ffa6219f6563"> <div> <div> <h2>pfSense Doesn’t Let You Specify ::/0</h2> <div><h3>Can’t block all IPv6 IPs using pfSense rules</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><p id="2f09">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="5a42"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="faf5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>

IPv6

Stories by Teri Radichel on IPv6

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: AWS Security | Network Security | IPv6

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I have been attacked online for writing stories about how to turn off IPv6. Well, I have been forced into revisiting the AWS protocol as of late. I’m once again reviewing the protocol headers, the next header field, neighbor discovery protocol, and all that fun stuff.

Interestingly enough, a well-known security source that states IPv6 z because the security features are optional. In addition, we are not yet facing IPv4 exhaustion issues. Hmm, that sounds familiar.

I would say that in certain cases, companies may have a need to use IPv6, having worked on some very extensive networks. However, with proper architecture to avoid linking up systems that do not need to connect to one another, perhaps even that could have been avoided.

You also likely don’t need it on your own home computer. If you are going to leave IPv6 enabled, make sure you know how to secure it and enable the required security features.

Also, make sure you have turned on and are monitoring IPv6, because many attackers are leveraging the fact that businesses haver improperly configured IPv6 and are not monitoring it.

Here are some of my posts to date on IPv6. I’ll add new posts here as I write them.

IPv6 Attacks

Attacks and defense for IPv6.

Disable IPv6 on a Mac

Many home networks and small to medium sized business networks do not need IPv6. They are not going to run out of IP space any time soon, nor do they need the extra complexity.

Better yet, disable anything you don’t need running.

Disable IPv6 on PFSense

In this post I explain how to disable IPv6 on PFSense. Your firewall of choice likely has similar options.

Working around an IPv6 DNS limitation

In this post, a particular update process at AWS was trying to force use of IPv6. However, upon inspecting the update service for Ubuntu, it supports IPv4 and IPv6. I had to perform a work around to get to the update service with IPv4 so I didn’t have to open up IPv6 in my network rules. I hope AWS fixes this. #awswishlist

IPv4 vs. IPv6

In this post I cover some of the pros and cons of IPv4 vs. IPv6, when I would use IPv6, and how.

IPv6 and Ubuntu security updates

Follow for updates.

Teri Radichel | © 2nd Sight Lab 2023

About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab
Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation
Follow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab
Ipv6
Ipv4
Neighbor Discovery
Ipv6 Header
Ipv6 Security
Recommended from ReadMedium