[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Re: If the IPv6 ORPort can't be reached, will clients/relays fall back to the IPv4 ORPort?



Am 21.07.26 um 08:40 schrieb forest-relay-contact--- via tor-relays:
Hello.

Marco Moock wrote:
Build an escalation system.
E.g. a single IPv6 will be blocked first, if more come from the same
/64, the entire /64 is blocked.
If more come from the same allocation (either use /48 or even bigger if
you can query the BGP data) to block the entire ISP.

The problem with that is that someone with an /80 in that /64 could get
everyone else on that /64 blocked, which could be used as a way to target
specific people by getting them kicked off their guard.

/64 is the smallest allocation for an ethernet link. The only place where multiple subscribers might be in the same /64 is hosting. For every other case, a /64 is assigned to one customer.

--
Gruß
Marco

Junk-Mail bitte an trashcan@xxxxxxxxxxxxxxxxxxxxxx

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx