Using IPv6 with prefixes shorter than a /64 on a LAN

Wed Jan 26 07:43:52 UTC 2011

On 25/01/2011 11:29 p.m., Roland Dobbins wrote:
> On Jan 26, 2011, at 8:12 AM, Fernando Gont wrote:
> 
>> Also, the claim that "IPv6 address scanning is impossible" is
>> generally based on the (incorrect) assumption that host addresses
>> are spread (randomly) over the 64-bit IID. -- But they usually
>> aren't.
> 
> It also doesn't take into account hinted scanning via routing table
> lookups, whois lookups, and walking reverse DNS, not to mention
> making use of ND mechanisms once a single box on a given subnet has
> been successfully botted.

+1

Thanks,
-- 
Fernando Gont
e-mail: fernando at gont.com.ar || fgont at acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1