Re: IPv6 Ignorance

["John R. Levine" <johnl () iecc com>]

> > IPv6 has its problems, but running out of addresses is not one of them.
> > For those of us worried about abuse management, the problem is the
> > opposite, even the current tiny sliver of addresses is so huge that
> > techniques from IPv4 to map who's doing what where don't scale.
>
> Well, in IPv4...  NAT broke it, because  networks implementing 1:many
> NAT could no longer easily identify what host was responsible for abuse.

I realize that's a problem in theory, in practice it's not because it's 
still rare to have interestingly different hosts behind a single NAT.

> What do you mean by suggesting IPv4 abuse management techniques to map 
> whose doing what, where do not scale to IPv6's larger address space?

Large networks keep separate reputation for every address in the IPv4 
address space based on the traffic they send.  You can't do that in IPv6, 
particularly since hostile bots can easily hop around within a /64, which 
is bad news if that /64 also has some legit hosts.

Regards,
John Levine, johnl () iecc com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. http://jl.ly