LinuxQuestions.org - anyone know a site that is running in IPv6 ?

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - anyone know a site that is running in IPv6 ? (https://www.linuxquestions.org/questions/linux-security-4/anyone-know-a-site-that-is-running-in-ipv6-4175733819/)

anyone know a site that is running in IPv6 ?

i want to test if my IPv6 block is working.

Code:

echo "net.ipv6.conf.all.disable_ipv6 = 1" >> /etc/sysctl.conf

Code:

drop ip6 any any -> any any (msg:"IPv6 Traffic Detected"; sid:100000001; rev:1;)

i used that command and suricata rule to block IPv6.

Eh, this one?

Code:

> www.linuxquestions.org

Server:        127.0.0.53

Address:        127.0.0.53#53



Non-authoritative answer:

www.linuxquestions.org  canonical name = www.linuxquestions.org.cdn.cloudflare.net.

Name:  www.linuxquestions.org.cdn.cloudflare.net

Address: 172.67.81.99

Name:  www.linuxquestions.org.cdn.cloudflare.net

Address: 104.24.137.8

Name:  www.linuxquestions.org.cdn.cloudflare.net

Address: 104.24.136.8

Name:  www.linuxquestions.org.cdn.cloudflare.net

Address: 2606:4700:20::6818:8808

Name:  www.linuxquestions.org.cdn.cloudflare.net

Address: 2606:4700:20::ac43:5163

Name:  www.linuxquestions.org.cdn.cloudflare.net

Address: 2606:4700:20::6818:8908

You could simply check the output of ifconfig command.
If you have disabled ipv6 completely, there won't any IPv6 IP listed.

Quote:

Originally Posted by pingu_penguin (Post 6483458)

You could simply check the output of ifconfig command.
If you have disabled ipv6 completely, there won't any IPv6 IP listed.

yes, but i would like to test if Suricata raises an alert when i try to connect to ip6 page.

Code:

root@pop-os:/home/vile# ifconfig

enp4s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500

        inet 192.168.50.174  netmask 255.255.255.0  broadcast 192.168.50.255

        ether f0:2f:74:54:aa:85  txqueuelen 1000  (Ethernet)

        RX packets 56025245  bytes 72700239290 (72.7 GB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 37101794  bytes 2591532469 (2.5 GB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

        device memory 0xfc600000-fc61ffff  



lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536

        inet 127.0.0.1  netmask 255.0.0.0

        loop  txqueuelen 1000  (Local Loopback)

        RX packets 125492  bytes 36632829 (36.6 MB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 125492  bytes 36632829 (36.6 MB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0



root@pop-os:/home/vile#

and that command doesnt show IPv6, which is good for me.

The question is flawed.

Most IPv6 stacks can indeed process both IPv4 and IPv6 traffic.
In many cases, if you want to accept IPv4 and IPv6 traffic, just run one stack, the IPv6 stack.

Most things on web are hidden behind DNS, so there it (IP) can be v4 or v6, you need to dig on the DNS. I think most things are still v4.

Have I ever typed IPv6 address into my browser? Can't say I have, by FF supports it as long as the OS supports it.