Re: Have you ever disabled IPv6 for privacy (to prevent IP leaks)?

Maria Sophia wrote:
> I never disagree with anyone stating a logically defensible viewpoint, and 
> I won't disagree with Brian Gregory in his statement because he's right 
> that a bridge actually does not confer IPv6 protection on a computer. 
> 
> I was wrong about that.
> I set up the bridge repeater to get Wi-Fi back (via Ethernet between
> the PC and the spare router) so that I could get back onto the Internet.

While I was wrong, I'm on the path to enlightenment, in terms of IPv6...

To reaffirm that Brian Gregory is right, I looked it up and found out that
it was a false negative that I *thought* the wireless bridge conferred
protection from IPv6 leaks. As Brian stated emphatically, it does not!

I accidentally inferred that it did because my IPv6 does not exist.
But, it turns out, my IPv6 likely has never existed on my current router).

Below are some IPv6 leak tests I think everyone should run at least once.

We're all working together as I'll wager many of us on these ngs were as
unaware as I was that IPv6 is, by design, a privacy hole par excellence.

Reaffirming that this whole IPv6 privacy thing is new to me and that it
floored me when I found out how different it is from IPv4, to test if the
Windows or Linux or Android methods are working, these commands may help.

 1. Test external visibility
    start firefox https://test-ipv6.com (Windows) 
    firefox https://test-ipv6.com (Linux)
    xdg-open https://test-ipv6.com (Android Termux)
 2. Check external reachability
    ping -6 google.com
 3. Identify the local interface configuration
    a. ipconfig (Windows)
    b. ifconfig / ip a (Linux)
    c. Termux > pkg install iproute2 > ip a (Android)
    d. Termux > pkg install net-tools > ifconfig (Android
 4. Test DNS resolution
    nslookup -type=AAAA google.com (Windows)
    dig AAAA google.com (Linux, Android Termux)
 5. Test IPv6 routing table
    route print -6 (Windows)
    ip -6 route (Linux/Android Termux)
 6. Test IPv6 WebRTC leaks
    firefox https://browserleaks.com/webrtc
    firefox https://ipleak.net	 
 7. Test IPv6 prefix delegation
    dhclient -6 -v (Linux/Android Termux)
 8. Test for VPN leaks
    firefox https://ipleak.net  
    firefox https://browserleaks.com/ip
 9. Router setup
    Netgear > Advanced > Advanced Setup > IPv6 > Internet Connection Type
     Disabled (IPv6 is completely off)
     Auto Detect (Router tries to detect IPv6 from your ISP)
     6to4 Tunnel (Legacy IPv6-over-IPv4 tunneling)
     Pass Through (Router passes IPv6 directly to LAN devices)
     Fixed (Manual IPv6 configuration)
     DHCP (Used when the ISP hands out IPv6 via DHCPv6)
     PPPoE (Used by DSL providers)
     Auto Config (Router uses SLAAC (stateless autoconfiguration)
     6rd Tunnel (An IPv6-over-IPv4 method used by some ISPs)
     Dual-Stack Lite (Used by ISPs that provide IPv6 but tunnel IPv4.\)
     v6plus (Japan-specific IPv6 service)
     
For example
 a. No IPv6 addresses were detected by https://test-ipv6.com
 b. ping -6 google.com fails 
 c. My Windows host only has link-local IPv6 (fe80::...)
 d. I have no global IPv6 (2000::/3)
 e. I have no IPv6 default gateway
 f. I have no IPv6 DNS
 g. All IPv6-only sites timed out

Specifically for  https://test-ipv6.com my IPv6 Firefox score was 0/10 
 Test with IPv4 DNS record = ok (2.421s) using ipv4
 Test with IPv6 DNS record = timeout (5.611s)
 Test with Dual Stack DNS record = ok (2.821s) using ipv4
 Test for Dual Stack DNS and large packet = ok (1.230s) using ipv4
 Test IPv6 large packet = bad (3.898s)
 Test if your ISP's DNS server uses IPv6 = ok (1.293) using ipv4
 Find IPv4 Service Provider = ok (2.300s) using ipv4 
 Find IPv6 Service Provider = bad (3.815s)	 

So, it turns out, I never had an IPv6 leak in the first place.
Because, if IPv6 doesn't exist past the router, it can't leak.

May I ask others out there what your IPv6 results were with Firefox?
-- 
What we can learn from everyone is more than we can learn ourselves.