New Airport Extreme could expose Macs via IPv6

[hagjohn]

New Airport Extreme could expose Macs via IPv6

Here's the potential issue, though: even though in most configurations, the Airport Extreme will act as a simple firewall and reject incoming sessions over IPv4, it lets incoming IPv6 sessions straight through. That is, unless you go in and enable the "Block incoming IPv6 connections" setting in Advanced > IPv6 for the base station. If you don't block incoming IPv6 sessions, you can actually connect to a Mac sitting behind the Airport Extreme from the outside, using SSH or FTP over IPv6, assuming those services are enabled. Long story short, you've lost your first line of defense on your home network for IPv6-enabled servers on your Macs.

Source: arstechnica.com

 

[logandzwon]

You are correct. IPv4 firewalls do not block ipv4 traffic. I'm not sure why Apple decided to leave ipv6 unfilttered. It seems a mistake to me.

 

[savar]

You are correct. IPv4 firewalls do not block ipv4 traffic. I'm not sure why Apple decided to leave ipv6 unfilttered. It seems a mistake to me.

It's probably just an oversight...I expect they will fix this quickly. It's not like Apple to ship a product with the default security so lax.

 

[adav]

So would the best config at the moment be...

---------
IPv6 mode: Tunnel
(tick) Block incoming IPv6 connections
---------

or

---------
IPv6 mode: Link-local only
---------

 

[logandzwon]

So would the best config at the moment be...

---------
IPv6 mode: Tunnel
(tick) Block incoming IPv6 connections
---------

or

---------
IPv6 mode: Link-local only
---------

For the 3 hours I used my aebs before deciding to get rid of it I used the first one.

 

[John Kotches]

The question I have is on the tv connected to the hopper on the dvr recording screen all the tv eposoides I have on a particular program show up as grouped together but on the joey all the shows all the programs indviually and not grouped like on the hopper is there a setting I need to change or this a bug any help would be appreciated.

Under DVR change the view from DVR date to A-Z.