Skynet Is default firewall good enough?

[SomeWhereOverTheRainBow]

Yes, I do. We had a long discussion of pros and cons.

Dual Stack home network pros and cons

Here, let's discuss the pros and cons of dual stack IPv4 and IPv6 home network. I personally have IPv6 disabled on my firewall for easier control and security reasons. My ISP provides 2x external IPv4 addresses as well as 4x IPv6 addresses. I would like to hear the benefits of running dual...

www.snbforums.com

Correct. The same applies to other firmware options. If disabled by default - there is a reason.

Essentially, if you are doing it to self-educate and don't mind the potential bump in the road learning curve (experience), then it might be worth the venture to try it out. However, it should be considered whether this is the true experience the user wishes to venture down before attempting such. It should be noted that finding help overcoming learning curves with ipv6 can be just as difficult as deciding not to enable it since there are just as many people for enabling it as there is in opposition of enabling it - Not everyone is talkative in troubleshooting issues with ipv6, so that personal learning experience may be truly that- a personal learning experience.

 

[Tech9]

Not everyone is talkative in troubleshooting issues with ipv6, so that personal learning experience may be truly that- a personal learning experience

It's hard to find if it works properly and nothing much the user can do, if it doesn't. We have some half-baked home routers as hardware running custom firmware from a developer with no IPv6 ISP available, on ISPs with different IPv6 implementations, if any. One can learn IPv6 protocol by heart and it won't make any difference. What home users can learn so much? How many sites support IPv6? Google and Facebook mostly. There is a browser plugin to show IPv4/IPv6 connections. Fun to watch. What else is there to learn from experience?

 

[SomeWhereOverTheRainBow]

It's hard to find if it works properly and nothing much the user can do, if it doesn't. We have some half-baked home routers as hardware running custom firmware from a developer with no IPv6 ISP available, on ISPs with different IPv6 implementations, if any. One can learn IPv6 protocol by heart and it won't make any difference. What home users can learn so much? How many sites support IPv6? Google and Facebook mostly. There is a browser plugin to show IPv4/IPv6 connections. Fun to watch. What else is there to learn from experience?

That is the whole story in a nutshell. It is one of those cannot win with it unless it is something that is truly of benefit to the individual. It really is a personal choice that majority of users probably do not need at this time. I just hope that when it comes time it is not an option, that technology is better equipped with the proper support for it instead of half-baked in.

 

[Tech9]

Let's encourage other guys to run IPv6 and observe what happens. Sounds like a plan.

Sorry, but I don't want the hit from China over IPv6 experience on my business networks.

 

[SomeWhereOverTheRainBow]

Let's encourage other guys to run IPv6 and observe what happens. Sounds like a plan.

Sorry, but I don't want the hit from China over IPv6 experience on my business networks.

You don't have to look very hard to get hit by China on ipv4 either. In retrospect, here is a good article that exposes some of the myths about how "secure" ipv6 is.

What Is IPv6 and Should I Enable It?

In this technical article, we will learn all about IPv6 and discover the difference between using IPv6 locally and across the Internet.

www.atlantic.net

 

[Tech9]

My IPv4 door has well known locking mechanism. It stops both traffic in and out in a controllable and predictable way. I don't want my network to be part of Internet.

 

[BreakingDad]

Sorry, I was busy inspecting German autobahns and the electricity issues in Danmark

Taking a walk on the wild side there bro.

 

[Tech9]

I could not fully enjoy the autobahn on my way North because someone applied QoS on my rental car and it cut off power before CPU at 100%. In few days though I'm going South on a different hardware.

 

[Gary_Dexter]

I could not fully enjoy the autobahn on my way North because someone applied QoS on my rental car and it cut off power before CPU at 100%. In few days though I'm going South on a different hardware.

Should use the IPv6-bahn.
More free lanes than the IPv4 one…

 

[Tech9]

I need one free lane only. I'm moving a single packet.

 

[SomeWhereOverTheRainBow]

Should use the IPv6-bahn.
More free lanes than the IPv4 one…

Yea and you have to turn your music up real loud otherwise people won't be able tell if you are coming or going, and your neighbors will hate you.

 

[Tech9]

Should use the IPv6-bahn.

Like the IPv6 ban idea.

 

[SomeWhereOverTheRainBow]

Like the IPv6 ban idea.

Ready for another reinvent the ipv6-wheel-megathread?

Dual Stack home network pros and cons

If something about IPv6 is broken in Asuswrt, they must know. Don't assume that - I lead/manage a SW team - we work on things we know, not on unknowns... If people don't test and report, the bugs won't be discovered or fixed... And with recent experience on AsusWRT 386 on RT-AC68U, there is...

www.snbforums.com

Those days of high ipv6-adventure!

 

[Smokey613]

I guess I am “fortunate“ on the IPv6 question. Only one of my ISPs support IPv6 and their support is very lacking so it is disabled on my stuff. So far, I have not encountered a reason to have IPv6 enabled, but then again, I stopped online gaming over 15 years ago.

 

[Tech9]

I stopped online gaming over 15 years ago.

When talking about IPv6 - it's about online gambling, not gaming.

 

[SomeWhereOverTheRainBow]

When talking about IPv6 - it's about online gambling, not gaming.

Can't win if you don't play?

 

[Tech9]

Can't win if you don't play?

It's a bit different gambling game. You play with all your devices and hope no one is going to win access to one or more of them. The dopamine level increases with noname IoT IPv6 capable devices.

 

[chongnt]

Here is the filter list i am currently rocking, (and yes any one is welcome to try it.)

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/filter.list

View attachment 40880

And I have yet to have a false positive.

I have added this and viktor jaep list to skynet for some time and it just works. Recently I noticed google images search only show whatever is on screen display. When I scroll down the page, other images are not loaded. Going through skynet blocked outbound packets, it seems some Google IP are blocked: 74.125.24.101, 74.125.24.100, 74.125.24.138. After unban these three address all the images are loading properly.
These ip seems to come from this list :

https://block.energized.pro/extensions/ips/formats/list.txt

 

[SomeWhereOverTheRainBow]

I have added this and viktor jaep list to skynet for some time and it just works. Recently I noticed google images search only show whatever is on screen display. When I scroll down the page, other images are not loaded. Going through skynet blocked outbound packets, it seems some Google IP are blocked: 74.125.24.101, 74.125.24.100, 74.125.24.138. After unban these three address all the images are loading properly.
These ip seems to come from this list :

https://block.energized.pro/extensions/ips/formats/list.txt

The woes of google domains. Yep there is no guarantee that something wont have to whitelisted from list like that. However, as long as we know how to whitelist, and accepting that something might have to be whitelisted down the road, then everything should be fine. I imagine at somepoint those will get removed from the list as soon as someone reports it to the list maintainer as a false positive.

 

[Skeptical.me]

Thanks for taking the time to share with us. I highly appreciate it.

As a reward: I also want to share a list of IP's for highly elusive nasties

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/IPlist.list

Are we able to add multiple lists to Skynet?