[TriLUG] Late night IPv6

[Igor Partola]

Bill,

That's strange. My test for a similar situation returns something like this:

Starting Nmap 5.21 ( http://nmap.org ) at 2013-05-10 19:44 UTC
Host is up (0.093s latency).
Not shown: 999 filtered ports
PORT   STATE SERVICE
22/tcp open  ssh

Nmap done: 1 IP address (1 host up) scanned in 9.23 seconds


Some explanations I can think of:

1. You have another firewall in play somewhere. Perhaps there are more
rules on the router itself, or on the desktop. Or maybe pilot has an
outgoing firewall.

2. Somehow your sshd is not set to listen on the IPv6 address.

3. Magic, elves, etc.



On Fri, May 10, 2013 at 2:38 PM, Bill Farrow <bill at arrowsreach.com> wrote:

> On Fri, May 10, 2013 at 11:30 AM, Igor Partola <igor at igorpartola.com>
> wrote:
> > I documented the ones I use here:
> > http://igorpartola.com/ipv6-2/you-need-ipv6-now-and-heres-how-to-get-it
>
> Hmm, I can't seem to get those to work enough to block a port scan
> from my pilot account.
>
> nmap -6 -sT 2001:470:8:xxx:xxx:xxxx:xxxx:xxxx
>
> Starting Nmap 5.21 ( http://nmap.org ) at 2013-05-10 13:23 EDT
> Nmap scan report for 2001:470:8:xxx:xxx:xxxx:xxxx:xxxx
> Host is up (0.081s latency).
> Not shown: 993 closed ports
> PORT     STATE    SERVICE
> 25/tcp   filtered smtp
> 6666/tcp filtered irc
> 6667/tcp filtered irc
> 6668/tcp filtered irc
> 6669/tcp filtered irc
> 7000/tcp filtered afs3-fileserver
> 9999/tcp filtered abyss
>
> Nmap done: 1 IP address (1 host up) scanned in 13.01 seconds
>
>