Re: SSH usage stats

On Sat, Nov 22, 2008 at 7:43 AM, Theo de Raadt <[email protected]> wrote:
>> Would like to know if your scanssh scan was restricted to the IPv4
>> address range, or included IPv6.
>
> Yeah, we ran it on 50% of the IPV6 space, but I guess we must have
> missed your hosts.  Actually, we didn't find any IPv6 hosts at all.
> IPv6 just provides a new kind of addressable socket to real the
> localhost, right?

Huh?  Ahhh, no.  From sshd_config:
ListenAddress ::

netstat -pan | grep ssh
tcp6       0      0 :::22                   :::*
LISTEN      10335/sshd

SSH only responds to requests from IPv6, not only localhost, from any
routed IPv6 address (fe80:: doesn't count, only the 2001::/3 addresses
are currently in use).  Even 127.0.0.1 isn't bound in my servers so
won't respond.

When IPv4 address space exhaustion occurs sometime in the next 2
years, the ICAAN is very likely to just turn it off.  Folks have not
been migrating as they should to IPv6.  So clearly, pain will be
required to force the transition.  I don't understand the reluctance,
but I'm ready.

>

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
       Nemesis Air Racing Team motto.