Re: IPv6 supported?

Please excuse me if I'm asking stupid questions, but I'm curious.

If I understand this discussion correctly ipv6 is not routed?

Does this mean that an ipv6 network cannot be private?

This sounds very strange to me...

If I switch to ipv6 I would very much prefer to have my own small closed secure network 
isolated from the rest of the world.

As far as I can read, on wiki for instance, routing is possible.

If routing is possible, so are private networks (?)

If private networks are possible, ipcop should support this (?)

Maybe I'm way off here :-)

Best regards
Danjel

On 7 Jul 2015 at 12:23, Administrator wrote:

> I would argue that IPCop's VPNs should, out of the box, ensure that
> (relevant) DNS enquiries are routed through the VPN, and that relevant
> IPv6 traffic (even if encapsulated over IPv4) ditto.  It may be that the
> latest design of the VPNs do this already, but last time I looked, I had
> to add manually a lot of additional config lines to the VPN setup to
> achieve this.
> 
> Yours
> David
> 
> On Tue, 2015-07-07 at 09:15 +0200, M. Neri wrote:
> 
> > I carefully read that paper and, even if I'm not an expert of VPNs, clearly 
> > it doesn't apply to IPCOP. They only investigated "commercial VPN services" 
> > that claim to let you surf the web in  privacy and anonymity (and this is 
> > not what a VPN is used for, it's better to use a service as TOR for that).
> > Why these commercial VPN services fail in their job? Just because of their 
> > bad clients that don't check if there's something going wrong on the host 
> > (modified routing table, etc...), etc... etc... The important thing for you 
> > is here:
> > 
> > "Differently from the commercial VPN services surveyed in
> > this paper, an enterprise VPN gives individual employees se-
> > cure access to their company network. Although enterprise
> > VPNs might be exposed to these attacks, we argue that their
> > impact is rather limited compared to commercial VPN ser-
> > vices. Importantly, in this scenario, access to corporate re-
> > sources is only possible via the secure tunnel. IPv6 traffic leak-
> > age is therefore not possible, as connections to the corporate
> > network outside the VPN tunnel are not allowed (assuming all
> > configurations are done correctly). Instead, hijacking the DNS
> > could leak the names of the resources being accessed within
> > the private enterprise network. However, unless the attacker
> > has detailed knowledge of the corporate network, the name
> > resolution will fail, and the user will notice the error and even-
> > tually stop using the VPN"
> > 
> > By the way, this is not a surprise for me. From what I recall, my prof of 
> > Cryptography I were always repeating, almost every day: "Never trust a 
> > commercial software, just use an open source one!".
> > Regards
> > 
> > Massimiliano
> > 
> > "Administrator" 
> > <admin-JJaFKVBkT/[email protected]> ha 
> > scritto nel messaggio 
> > news:1435924112.3704.2.camel-JJaFKVBkT/[email protected]
> > > It would be very useful if IPCop acknowledged the existence of IPv6.
> > > Without that, there seem to be security risks (see
> > > http://www.eecs.qmul.ac.uk/~hamed/papers/PETS2015VPN.pdf ).
> > >
> > > IPCop has VPNs "out of the box."  Do they protect against these
> > > information leakage issues?
> > > Can anyone with more understanding of these things comment?
> > >
> > > Yours
> > > David
> > >
> > > On Fri, 2015-07-03 at 10:59 +0200, Cyril Alberts wrote:
> > >
> > >> Since the NAT-Feature from IPv4 is not portable to IPv6 yet (AFAIK), I
> > >> hope it does not!
> > >>
> > >> IPCop is a security appliance and IPv6 by default is not!
> > >>
> > >> Greetings,
> > >>
> > >> Cyril
> > >>
> > >> On 02.07.2015 20:49, Kanwar Ranbir Sandhu wrote:
> > >> > Hi Everyone,
> > >> >
> > >> > Does IPCop support IPv6? I'm interested in trying it out on my home
> > >> > network, but I have no idea if ipcop supports it.
> > >> >
> > >> > Thanks,
> > >> >
> > >> > Ranbir
> > >> >
> > >>
> > > ------------------------------------------------------------------------------
> > > Don't Limit Your Business. Reach for the Cloud.
> > > GigeNET's Cloud Solutions provide you with the tools and support that
> > > you need to offload your IT needs and focus on growing your business.
> > > Configured For All Businesses. Start Your Cloud Today.
> > > https://www.gigenetcloud.com/
> > > _______________________________________________
> > > IPCop-user mailing list
> > > [email protected]
> > > Manage your subscription or unsubscribe
> > > https://lists.sourceforge.net/lists/listinfo/ipcop-user
> > > 
> > 
> > 
> > 
> > 
> > ------------------------------------------------------------------------------
> > Don't Limit Your Business. Reach for the Cloud.
> > GigeNET's Cloud Solutions provide you with the tools and support that
> > you need to offload your IT needs and focus on growing your business.
> > Configured For All Businesses. Start Your Cloud Today.
> > https://www.gigenetcloud.com/
> > _______________________________________________
> > IPCop-user mailing list
> > [email protected]
> > Manage your subscription or unsubscribe
> > https://lists.sourceforge.net/lists/listinfo/ipcop-user
> ------------------------------------------------------------------------------
> Don't Limit Your Business. Reach for the Cloud.
> GigeNET's Cloud Solutions provide you with the tools and support that
> you need to offload your IT needs and focus on growing your business.
> Configured For All Businesses. Start Your Cloud Today.
> https://www.gigenetcloud.com/
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user



------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user