Any chances of ShieldsUp! to support IPv6?

  • Be sure to checkout “Tips & Tricks”
    Dear Guest Visitor → Once you register and log-in:

    This forum does not automatically send notices of new content. So if, for example, you would like to be notified by mail when Steve posts an update to his blog (or of any other specific activity anywhere else), you need to tell the system what to “Watch” for you. Please checkout the “Tips & Tricks” page for details about that... and other tips!

    /Steve.

DanR

Dan
Sep 17, 2020
188
48
Probably not. :)

Steve is quite busy with SpinRite, now and for some time to come. But, after that? :unsure:
 

PHolder

Well-known member
Sep 16, 2020
710
2
352
Ontario, Canada
In order for it to support IPv6, GRC would need to have an IPv6 link into it's servers, I'd presume. I'm sure @Steve would love to have time to play with IPv6. Perhaps he can put it on his future projects list.
 

Philip

Incorrigible Inquisitor
Sep 28, 2020
20
3
UK
If you sign up for IPv6 you don't just get one IP address but probably a minimum of 65,536! So there'd be not just be 65,536 ports to scan, but 65,5536 prorts to scan on each IP address! If you're wanting to scan your Internet-facing router there's no knowing which IP addresses the ISP might leave open to use to contact the router itself for management or updates. So in short, it's complicated.
 

PHolder

Well-known member
Sep 16, 2020
710
2
352
Ontario, Canada
but probably a minimum of 65,536
Well that would be a cheezy ISP indeed. You should get a /64 ... meaning 2^64 IP addresses. From https://en.wikipedia.org/wiki/IPv6#Larger_address_space "The standard size of a subnet in IPv6 is 2^64 addresses, about four billion times the size of the entire IPv4 address space."

In any case, you would only scan the device making the request (still a single IP.)
 
  • Like
Reactions: Dave

Dave

Dave Jenkins, N1MXV
Sep 16, 2020
101
56
Gardner, MA (USA)
Well that would be a cheezy ISP indeed. You should get a /64 ... meaning 2^64 IP addresses. From https://en.wikipedia.org/wiki/IPv6#Larger_address_space "The standard size of a subnet in IPv6 is 2^64 addresses, about four billion times the size of the entire IPv4 address space."

In any case, you would only scan the device making the request (still a single IP.)
So, rather than "he could write it but then he'd have to kill you", it's more like: he could write it but you'd be dead before it finished running. 🤣
 
  • Like
Reactions: Barry Wallis

rfrazier

Well-known member
Sep 30, 2020
300
94
If you sign up for IPv6 you don't just get one IP address but probably a minimum of 65,536! So there'd be not just be 65,536 ports to scan, but 65,5536 prorts to scan on each IP address! If you're wanting to scan your Internet-facing router there's no knowing which IP addresses the ISP might leave open to use to contact the router itself for management or updates. So in short, it's complicated.
And THAT'S why I'm avoiding IPv6 as a home user like the plague.

May your bits be stable and your interfaces be fast. :cool: Ron
 

danlock

Well-known member
Sep 30, 2020
160
53
USA
And THAT'S why I'm avoiding IPv6 as a home user like the plague.
Just block all inbound traffic from all sources except for connections responding directly to outbound connections initiated by local processes and allowed by you (the human).

i.e. "Block outbound connections that do not match a firewall rule you have created. Inbound packets are allowed over allowed connections that have been initiated locally and when using specified protocols/ports/interface types. Block all others."
 

Steve

(as in GRC)
Staff member
Feb 1, 2019
378
1
1,001
66
Southern CA, USA
www.grc.com
The subject says it all.
PHolder's right... I'd LOVE to play with IPv6. And I really want to scan all 65,536 TCP ports by default, rather than just the first 1024. I once limited it to the service ports due to server bandwidth constraints back when I was on the other side of a pair of T3 lines. But I've had ample bandwidth ever since I moved to Level3.

But I'll need to get SpinRite and Beyond Recall into their initially finished condition before I can make time for that. And Michael's request for UDP would be great to support as well. :)