I’ll wager that 99% of people who read this from home are coming to me through an IPv4 NAT device that is only a few short steps from where they are sitting. NAT and IPv4, for reasons I understand yet still loathe, just go together these days. I’ll save my un-ending rant against NAT for…
DetailsIPv6 has added many new words and ideas to the lexicon of IT professionals. One of the least expected: deprecate. The dictionary (dictionary.com) says that deprecate means “to express earnest disapproval of”, to “urge reasons against” or, oddly, “to pray for deliverance from”. In the IT world the world a thing being ‘deprecated’ is a…
DetailsIn IPv6 there are four [tables | lists | data structures] used as part of the packet forwarding process (e.g. Neighbor Discovery and the Conceptual Sending Algorithm). They are: Neighbor Cache Destination Cache Prefix List Default Router List These data structures are currently defined by RFC 4861 (and previously by RFC 1970 and RFC 2461,…
DetailsMicrosoft Windows OS’ have a resolver cache built into the actual OS. Most Windows admins already know this. When your Windows system performs a DNS query the results are stored by the OS and are available for use by other applications and processes running on the system. This means that you can resolve www.itdojo.com to…
DetailsJust last week (July 12, 2012), the Chief Information Officers Council released this updated version of the Roadmap Toward IPv6 Adoption for the Federal Government to help with the upcoming deadlines for September of 2012 and September 2014. It highlights the history as well as the government’s vision for IPv6. To read the original article…
DetailsThe effectiveness of Security through Obscurity is closely related to the knowledge (or lack thereof) of the attacker. If someone is unaware of how a particular technology works, the data is obscured by the nature of the technology. Once some understanding is had by your adversary, however, the security vanishes. Some examples are: 1. Not…
DetailsDirective 8570.01 is an initiative that sets out to provide guidance and procedures for training, certification, and management of the Department of Defense (DoD) workforce that are in positions related to Information Assurance.
I recently read a few articles from around the the Internet regarding the debate surrounding the use of /64 or /126 prefixes on P2P links. Here is a response I left on another site: “The idea of using /126′s is little more than scar tissue from our experience with IPv4. It is the application of…
Details
June 8th, 2011 is World IPv6 Day! If you aren’t already running IPv6 this is as good a time as any to get your systems set up to play on the IPv6 Internet. Head over to the official World IPv6 Day web site and get going. http://worldipv6day.org/
DetailsNetwork Address Translation – A Black Mark on IPv4’s Name Why do people use Network Address Translation? Because they always have, that’s why. “That’s the way we’ve always done it” is one of the dumbest reasons we do things. It precludes continued thought and absolves us the responsibility to think about why we are doing…
Details