Last batch of IPv4 given out

[Little-Miss]

World shrugs as IPv4 addresses finally exhausted ? The Register

This is probably old news again lol, but i found it interesting!

[srochford]

We are getting ready - most of our machines now have both IPv4 and IPv6 addresses. Our mail gateways have IPv6 addresses and the infrastructure is moving forwards.

The biggest change Ipv6 will bring is the end of NAT and the security that that can bring but I think we're still quite a way away from that (are any "home" ISPs yet using IPv6??)

[Hightower]

We are getting ready - most of our machines now have both IPv4 and IPv6 addresses.

But IPv4 should work in your network fine still right? Unless every PC is visible to the internet?

[Soulfish]

But IPv4 should work in your network fine still right? Unless every PC is visible to the internet?

Well with IPv6 the idea is that every device has a publicly accessible IP . No more NAT! All of our infrastructure has been designed with IPv6 support in mind, but need to check with our LEA what their plans are to support it.

[Domino]

as I saw on twitter yesterday;

I came here to kick ass and give out IPV4 Addresses

...And I'm all out of IPV4 Addresses

[Little-Miss]

lol brililant!

[srochford]

But IPv4 should work in your network fine still right? Unless every PC is visible to the internet?

Every PC is visible to the internet ... (eg I'm sitting at phws325-002.ph.ic.ac.uk - you should be able to do an NSLookup for it and I think it will respond to a ping)

[Hightower]

Every PC is visible to the internet ... (eg I'm sitting at phws325-002.ph.ic.ac.uk - you should be able to do an NSLookup for it and I think it will respond to a ping)

No reply on a ping. What are the security implications of each machine being publicly accessible?

[localzuk]

I wonder if anyone who is implemented IPv6 in their school would like to write a post about what they did, as a sort of guide to give others an idea of what they need to look at. Eventually we'll all need to look at this I'm guessing, so it may be nice to start planning to do it.

[srochford]

No reply on a ping. What are the security implications of each machine being publicly accessible?

they're all firewalled so it's not much of an implication but it means that staff/students can connect to the VPN and then access their machine from outside without any weirdness that you'd get with NAT.

We have loads of collaborative working so you'll get users on the other side of the world who've remote desktopped into their own machine. We now also have a system where they can remote WoL their machine (all part of our power saving initiative)

[powdarrmonkey]

(are any "home" ISPs yet using IPv6??)

Mine does, natively.

Well with IPv6 the idea is that every device has a publicly accessible IP

Not quite; every device has a globally routable address. Whether it's publicly accessible or not depends on local router policy.

[glennda]

So in real terms how do people think this will affect schools or any network? I (like most people i think- or maybe just me!) have heard alot about this but don't really know much about it. All i know is that its going to replace IPv4 and the address involves using the machines mac address.

[powdarrmonkey]

So in real terms how do people think this will affect schools or any network? I (like most people i think- or maybe just me!) have heard alot about this but don't really know much about it.

In the short term, very little. You will only start to notice problems when sites appear that are only available on IPv6, and no sane provider is going to start doing that yet.

the address involves using the machines mac address.

Not always. You can hand out addresses on a DHCP-like basis if you like (originally engineered by Microsoft in Server 2008, to alleviate privacy concerns). The trade-off is that you then can't use things like multicast router provision, self-generating addresses, and so on.

[edutech4schools]

Google facebook and yahoo are testing ipv6 on June the 8th so no ipv4 access. All my schools have 2003 server so probably going to need a bit more work/testing to get things running.

[m25man]

Room362.com - Blog and good old Mubix have been teaching your kids for years about IP V6 exploits.
Hak5 did a good episode recently on it and I have seen at least one incident of a home users Vista Laptop under the control of a Syrian IP V6 host

Enabling Teredo Tunneling and exploiting the victims unprotected systems is going to be very a very interesting sport for the next few years and is going to be a major money spinner for the AV and firewall manufacturers.