RE: 2002::/16 [6to4] & abuse

2014-09-24 Thread David Hubbard
Thanks Bill, TJ and Owen; it's much clearer now. David

Re: 2002::/16 [6to4] & abuse

2014-09-24 Thread Paige Thompson
On 2014-09-24 20:09, William Herrin wrote: Hi David, 6to4 is a stateless tunnel network. The tunnel entry node advertises 2002::/16 into the native IPv6 network and relays received IPv6 packets inside an IPv4 packet. The tunnel exit node's IPv4 address is encoded in the 6to4 IPv6 destination add

Re: 2002::/16 [6to4] & abuse

2014-09-24 Thread William Herrin
Hi David, 6to4 is a stateless tunnel network. The tunnel entry node advertises 2002::/16 into the native IPv6 network and relays received IPv6 packets inside an IPv4 packet. The tunnel exit node's IPv4 address is encoded in the 6to4 IPv6 destination address. No IPv6 addresses are changed in the t

Re: 2002::/16 [6to4] & abuse

2014-09-24 Thread TJ
2002::/16 would be advertised by anyone *still *operating a 6to4 relay. A host w/ only IPv4 connectivity could use 6to4 to get access to an IPv6-only resource, thanks to automatic IPv6-in-IPv4 encapsulation (Protocol41) and with a helping hand from publicly operated relays. Someone with (only?) na

2002::/16 [6to4] & abuse

2014-09-24 Thread David Hubbard
Curious if anyone can tell me, or point me to a link, on how 2002::/16 is actually implemented for 6to4? Strictly for curiosity. We had a customer ask about blocking spam from their wordpress blog that we host and the spammer was using 2002:af2c:785::af2c:785, which was the first time I'd seen wo