{"id":228043,"date":"2012-04-20T07:58:30","date_gmt":"2012-04-20T06:58:30","guid":{"rendered":"http:\/\/securite.intrinsec.com\/?p=395"},"modified":"2012-04-20T07:58:30","modified_gmt":"2012-04-20T06:58:30","slug":"ipv6-et-la-securite-nouvelles-du-front-avril","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-avril\/","title":{"rendered":"IPv6 and security: news from the front \u2013 April"},"content":{"rendered":"<p><strong>Published articles<\/strong> Eric Vyncke published an article in which he presents methods for blocking IPv6 tunnels:\u00ab\u00a0<a href=\"https:\/\/www.networkworld.com\/community\/node\/47270\">Can we block all IPv6 tunnels in our enterprise network?\u00a0<\/a>\u00bbHe begins by reminding everyone that tunnels can be used to bypass filtering mechanisms and that there are rumors that... <em>botnet s<\/em>would use such tunnels. Primarily based on Cisco technologies, here are their proposals for blocking IPv6 tunnels:<\/p>\n<ul>\n<li>\u00a0For 6to4 and ISATAP tunnels, it is sufficient to block protocol 41 with an ACL (Access Control List).<\/li>\n<li>For Teredo tunnels, which are based on UDP, Flexible Pattern Matching (FPM) technology can be used, as it allows for the creation of sufficiently precise filtering rules (analysis of the content of the UDP datagram).<\/li>\n<li>Finally, it is also possible to disable these tunnels on workstations by modifying the Windows configuration (<a href=\"http:\/\/support.microsoft.com\/kb\/929852\">http:\/\/support.microsoft.com\/kb\/929852<\/a>)<\/li>\n<\/ul>\n<p>An article entitled &quot;\u00ab\u00a0<a href=\"https:\/\/www.ipv6security.nl\/?author=2\">Example::IPv6:firewall:ruleset<\/a>\u00a0\u00bbThis was published by Ferry. It&#039;s an example of a Cisco firewall configuration for IPv6 traffic. It can be used as a starting point when setting up such a firewall. Keith O&#039;Brien wrote a <a href=\"http:\/\/www.keithobrien.org\/1\/post\/2012\/04\/ipv6-security-unit-testing-script.html\">script <\/a>allowing you to test an IPv6 stack and find out if it is vulnerable to certain attacks (six tests allowing you to test six attacks are performed by the script). <strong><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Conferences<\/strong><\/p>\n<p>Fernando Gont gave a lecture at <a href=\"http:\/\/2012.hackitoergosum.org\/\">Hackito Ergo Sum<\/a>\u00a0: \u00ab\u00a0<a href=\"http:\/\/www.si6networks.com\/presentations\/HES2012\/fgont-hes2012-recent-advances-in-ipv6-security.pdf\">Recent Advances in IPv6 Security<\/a>\u00a0\u00bbwhere he presents his latest research in the field of IPv6 security, presented in six parts:<\/p>\n<ul>\n<li>\u00ab&quot;IPv6 Addressing&quot;: Currently, the mechanisms for generating an IPv6 address are not optimal: they either facilitate network scans or make IT system administration more difficult. Fernando Gont therefore proposes a new method for generating an address. This address would change each time a host changes networks.<\/li>\n<li>\u00ab&quot;IPv6 Fragmentation &amp; Reassembly&quot;: The presenter conducted tests to determine if operating systems use <em>fragments ID<\/em> predictable or if they handle correctly the <em>atomic fragments<\/em>. The result is that most operating systems do not accept the <em>overlapping fragments<\/em> but some do not treat them correctly <em>atomic fragments<\/em>. THE <em>draft<\/em> <a href=\"https:\/\/tools.ietf.org\/html\/draft-ietf-6man-ipv6-atomic-fragments-00\">draft-ietf-6man-ipv6-atomic-fragments<\/a> indicates how an IPv6 stack should handle these <em>atomic fragment<\/em>.<\/li>\n<li>\u00abIPv6 First Hop Security\u00bb: In the <em>draft<\/em>\u00a0<a href=\"https:\/\/tools.ietf.org\/html\/draft-gont-6man-nd-extension-headers-02\">draft-gont-6man-nd-extension-headers<\/a>,Fernando Gont proposes banning fragmentation with Neighbor Discovery messages. This would allow for effective monitoring mechanisms for this type of message. He also participated in drafting the <em>draft<\/em> <a href=\"https:\/\/tools.ietf.org\/html\/draft-ietf-v6ops-ra-guard-implementation-02\">draft-gont-6man-ra-guard-implementation<\/a>\u00a0which provides advice on how to effectively filter Router Advertisement messages.<\/li>\n<li>\u00abIPv6 Firewalling\u00bb: The <em>draft<\/em> <a href=\"https:\/\/tools.ietf.org\/html\/draft-gont-6man-oversized-header-chain-01\">draft-gont-6man-oversized-header-chain<\/a> offers solutions that facilitate the filtering of IPv6 packets.<\/li>\n<li>\u00abMitigation to some Denial of Service attacks\u00bb: The <em>draft<\/em> <a href=\"https:\/\/tools.ietf.org\/html\/draft-gont-6man-ipv6-smurf-amplifier-00\">draft-gont-6man-ipv6-smurf-amplifier<\/a>\u00a0proposing a method to limit the risks of Smurf-type attacks.<\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Articles publi\u00e9s Eric Vyncke a publi\u00e9 un article dans lequel il pr\u00e9sente des m\u00e9thodes pour [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":51,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46],"class_list":["post-228043","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-veille-securite","tag-ipv6"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril - INTRINSEC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-avril\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril\" \/>\n<meta property=\"og:description\" content=\"Articles publi\u00e9s Eric Vyncke a publi\u00e9 un article dans lequel il pr\u00e9sente des m\u00e9thodes pour [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-avril\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2012-04-20T06:58:30+00:00\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\"},\"headline\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril\",\"datePublished\":\"2012-04-20T06:58:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/\"},\"wordCount\":530,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"IPv6\"],\"articleSection\":[\"Veille S\u00e9curit\u00e9\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/\",\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2012-04-20T06:58:30+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-avril\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Admin\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IPv6 and Security: News from the Front \u2013 April \u2013 INTRINSEC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-avril\/","og_locale":"en_US","og_type":"article","og_title":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril","og_description":"Articles publi\u00e9s Eric Vyncke a publi\u00e9 un article dans lequel il pr\u00e9sente des m\u00e9thodes pour [&hellip;]","og_url":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-avril\/","og_site_name":"INTRINSEC","article_published_time":"2012-04-20T06:58:30+00:00","author":"Admin","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/"},"author":{"name":"Admin","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a"},"headline":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril","datePublished":"2012-04-20T06:58:30+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/"},"wordCount":530,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#primaryimage"},"thumbnailUrl":"","keywords":["IPv6"],"articleSection":["Veille S\u00e9curit\u00e9"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/","url":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/","name":"IPv6 and Security: News from the Front \u2013 April \u2013 INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#primaryimage"},"thumbnailUrl":"","datePublished":"2012-04-20T06:58:30+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-avril\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 avril"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a","name":"Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Admin"},"url":"https:\/\/www.intrinsec.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=228043"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228043\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/pages\/51"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=228043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=228043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=228043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}