| 24 Jan 2022 |
 vk3jed#5126 | On that note, it's worth looking for "IPv6 port forwarding" which is often a mislabelled packet filter (and not "port forwarding" at all! | 00:17:52 |
| vk3jed#5126 | * On that note, it's worth looking for "IPv6 port forwarding" which is often a mislabelled packet filter (and not "port forwarding" at all)! | 00:18:06 |
 Joshua DC7IA 🏳️🌈 | In reply to @_discord_387715206777798666:t2bot.io
My FritzBox is several years old and a 10 year old design. Firewalls IPv6 by default. I have to open ports or disable the firewall if I want to allow inbound traffic to a specific host. Get a more current one.
Oh and IPv6 issues can also be because of the "protect my children from too much time on the web" setting, there's a bug in older devices.
The newer one's offer way more fearures, many bug and security patches and also nice things like Letsencrypt support and Wireguard. | 00:45:16 |
| vk3jed#5126 | I’m not the one with the problem | 00:47:25 |
| Joshua DC7IA 🏳️🌈 | In reply to @_discord_387715206777798666:t2bot.io
Really? Most routers I've seen have a firewall on IPv6 that defaults to blocking all inbound traffic, which is a sensible default. Nope. IPv6 shouldn't be blocked. Especially not ICMP if you want IPv6 to work.
Some conmections will just not work without ICMP. People should stop blocking ICMP if they want their IPv6 to work. | 00:48:04 |
| vk3jed#5126 | Inbound IPv6. Outbound is open, and it’s a stateful firewall. And ICMP would be enabled | 00:49:22 |
| Joshua DC7IA 🏳️🌈 | In reply to @_discord_387715206777798666:t2bot.io
I’m not the one with the problem I don't know what you see on the other end of the bridge, but seems to be different. | 00:49:41 |
| Joshua DC7IA 🏳️🌈 | * I don't know what you see on the other end of the bridge, but seems to be different. | 00:50:02 |
 SP5WWP#6906 | ahoy! | 07:23:42 |
| vk3jed#5126 | Hey Woj | 07:31:55 |
| SP5WWP#6906 | 😎 | 07:32:37 |
| vk3jed#5126 | I'm not sure I followed Joshua's arguments above. Kinda got distracted 😄 | 07:41:18 |
| vk3jed#5126 | * I'm not sure I followed Joshua's arguments above. Kinda got distracted, before the next reply 😄 | 07:42:31 |
 rfs#8200 | Speaking to the backlog, this is possible, but needs a centralized "Home Location Registry" (to use GSM speak) to know what repeater/basestation to route the SMS and calls to. Brandmeister does this for example with DMR. So private calls and SMS works with it. | 09:43:06 |
| SP5WWP#6906 | cant wait to actually use it | 09:46:04 |
| SP5WWP#6906 | hej rfs | 09:46:32 |
| rfs#8200 | Hello | 09:47:01 |
| SP5WWP#6906 | cant also wait to have proper m17 rx in my md380 xD | 09:47:48 |
| rfs#8200 | Not stupid when China is aggressively pushing for IPv6 domestically. So a setting like that could turn off internet for some domestic users of it. The plan is something like Fully IPv6 on 2025 or something. So even cheap devices from chinese mfg's will have functional IPv6 due to that. | 09:50:32 |
| rfs#8200 | Yeah when that works I'll mod mine to use M17 | 09:51:26 |
| rfs#8200 | But before that it shall stya DMR | 09:51:37 |
| rfs#8200 | * But before that it shall stay DMR | 09:51:41 |
| SP5WWP#6906 | QSL | 09:54:57 |
 edgetriggered | Misunderstanding, I think. IPv6 support is a good thing but a vendor should include a functional firewall. At the very least a user should expect incoming traffic not established or related to be dropped by default, to mimic the protection you get from port address translation with legacy IP. TP-Link allegedly allowing all incoming traffic without any configuration is chaotic evil. | 16:34:20 |
| rfs#8200 | vendor should include a functional firewall | 16:34:41 |
| rfs#8200 | 100% agreed | 16:34:45 |
| rfs#8200 | Security by obscurity at best. As currently portscanning all of the IPv6 addresses is unrealistic. | 16:37:33 |
| rfs#8200 | But so was thought about IPv4 at one time | 16:37:42 |
| rfs#8200 | And then tools like zmap appeared that did all of IPv4 in 45minutes with a 1000mbit pipe and modest server. | 16:38:10 |
| rfs#8200 | And that was on introduction, must be faster now. | 16:38:17 |
