anyone know a site that is running in IPv6 ?

////// · 02-13-2024, 10:17 AM

i want to test if my IPv6 block is working.

Code:

echo "net.ipv6.conf.all.disable_ipv6 = 1" >> /etc/sysctl.conf

Code:

drop ip6 any any -> any any (msg:"IPv6 Traffic Detected"; sid:100000001; rev:1;)

i used that command and suricata rule to block IPv6.

lvm_ · 02-13-2024, 11:23 AM

Eh, this one?

Code:

> www.linuxquestions.org
Server:         127.0.0.53
Address:        127.0.0.53#53

Non-authoritative answer:
www.linuxquestions.org  canonical name = www.linuxquestions.org.cdn.cloudflare.net.
Name:   www.linuxquestions.org.cdn.cloudflare.net
Address: 172.67.81.99
Name:   www.linuxquestions.org.cdn.cloudflare.net
Address: 104.24.137.8
Name:   www.linuxquestions.org.cdn.cloudflare.net
Address: 104.24.136.8
Name:   www.linuxquestions.org.cdn.cloudflare.net
Address: 2606:4700:20::6818:8808
Name:   www.linuxquestions.org.cdn.cloudflare.net
Address: 2606:4700:20::ac43:5163
Name:   www.linuxquestions.org.cdn.cloudflare.net
Address: 2606:4700:20::6818:8908

business_kid · 02-13-2024, 11:34 AM

How about ipv6.net?

////// · 02-13-2024, 12:35 PM

thanks guys.

pingu_penguin · 02-14-2024, 01:29 AM

You could simply check the output of ifconfig command.
If you have disabled ipv6 completely, there won't any IPv6 IP listed.

////// · 02-14-2024, 08:09 AM

Quote:

Originally Posted by pingu_penguin

You could simply check the output of ifconfig command.
If you have disabled ipv6 completely, there won't any IPv6 IP listed.

yes, but i would like to test if Suricata raises an alert when i try to connect to ip6 page.

Code:

root@pop-os:/home/vile# ifconfig
enp4s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.50.174  netmask 255.255.255.0  broadcast 192.168.50.255
        ether f0:2f:74:54:aa:85  txqueuelen 1000  (Ethernet)
        RX packets 56025245  bytes 72700239290 (72.7 GB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 37101794  bytes 2591532469 (2.5 GB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device memory 0xfc600000-fc61ffff  

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 125492  bytes 36632829 (36.6 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 125492  bytes 36632829 (36.6 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

root@pop-os:/home/vile#

and that command doesnt show IPv6, which is good for me.

Linux_Kidd · 02-27-2024, 04:30 PM

The question is flawed.

Most IPv6 stacks can indeed process both IPv4 and IPv6 traffic.
In many cases, if you want to accept IPv4 and IPv6 traffic, just run one stack, the IPv6 stack.

Most things on web are hidden behind DNS, so there it (IP) can be v4 or v6, you need to dig on the DNS. I think most things are still v4.

Have I ever typed IPv6 address into my browser? Can't say I have, by FF supports it as long as the OS supports it.