firehol / iprange

manage IP ranges
Other
198 stars 50 forks source link

IPv6? #14

Open welwood08 opened 8 years ago

welwood08 commented 8 years ago

I was experimenting to see what happened if I fed iprange IPv6 addresses, somewhat predictably it failed like so:

::/8
iprange: Ignoring text after hostname '' on line 1: '::/8
'
iprange: DNS: '' failed permanently: Invalid value for hints
2001:ddd:1::/48
iprange: Ignoring text after hostname '2001' on line 2: ':ddd:1::/48
'
iprange: DNS: '2001' failed permanently: Invalid value for hints

Is there any long-term plan for some level of IPv6 support? For my personal use I'm not in any hurry but I can see how it might be useful to others. Obviously the problem space is exponentially larger, so I could also understand if the answer's "never" - useful to have in the issue list nonetheless for future searchers.

ktsaou commented 8 years ago

Yes, unfortunately iprange is only IPv4 at the moment. IPv6 lists are not that common (I have found just 2-3 of them), so I didn't develop it.

But yes, if we need it, we could do it. Actually, we could update iprange to always be IPv6 and express IPv4 address space in IPv6 ::ffff:IPV4.

welwood08 commented 8 years ago

Thanks for the quick response. Glad to hear you already have an idea of how to implement support should the need for it increase, I was indeed planning how I might optimally merge IPv6 blocklists in the future.

Is it OK to leave this issue open so I can be notified when the day comes or do you prefer 0 open issues? (I'm sure I'm years away from actually needing to worry even if the bad actors move to v6 sooner, so no worries if you prefer to close.)

WaterByWind commented 7 years ago

IPv6 blacklists still seem uncommon but there are a couple.

http://www.blocklist.de/en/export.html has chosen to include both IPv4 and IPv6 together in the same lists, based on user feedback. IPv6 entries are not very common but do appear.

SpamHaus now has a DROPv6 list, though it is generally rather short.

And there is Team-Cymru that publishes a fullbogons list for each of IPv4 and IPv6.

cbuijs commented 7 years ago

All list on ipdeny.com are now IPv6 as well (not really blocklist, but I use them to block some countries high in the security lists):

http://www.ipdeny.com/blog/ipv6-blocks-are-ready-for-download/

And some others:

https://www.myip.ms/files/blacklist/csf/latest_blacklist.txt https://www.stopforumspam.com/downloads (several lists)

(And as mentioned already, DROPv6 by spamhaus, which is already worth it on it's own).

They all seem to be growing and including IPv6 more and more. I would say better to be early then late on this, as IPv6 is a nice "new" vector for nasty people to use, and if we cannot block it by the lack of tools (or knowledge), we are defenseless.

Just my 2 cents.

bzed commented 6 years ago

any news on this issue? ipv6 support would be really great to have!

bolemo commented 4 years ago

2020, almost 2021. An ip6range tool would be great. Any status update on IPv6 support?

bolemo commented 2 years ago

It seems this project is dead… At least in this Repository.

dg-nx commented 1 year ago

Another +1 for v6 support if anyone has the time...

kseistrup commented 7 months ago

Yeah, IPv6 would be really nice.