[arm-allstar] IPV6

[Benjamin Naber]

Chris et al:

IPv6 is on just about everyone mobile device who is cellular network
connected. Some providers, in some areas, are only issuing IPv6
addresses to the wireless devices, and using a IPv6 to IPv4 gateway to
get to websites and web based services. One such is hamvoip.org and 
ebay.com.

on a Linux or apple box, try it for yourself:

dig a ebay.com 
dig aaaa ebay.com
dig a hamvoip.org
dig aaaa hamvoip.org

Mobile cellular data service providers and many residential ISPs only
give their clients ONE IP address. If the ISP knows what they are doing
they are dual-stacking - giving one IPv4 and one IPv6 address.

This said, any decent home router such as Microtik, not the junk from
the ISP, can be used with a dynamic DNS service: freedns, dyn.com,
dns.he.net.

Many of us are not going to memorize an IPv6 address, especially since
they are subject to change without notice. An ISP issued IPv6 address
lease times on them are apparently much shorter than IPv4. 

The dynamic DNS service will allow your router to communicate with the
DNS service to provide a more human suited method of addressing.
Instead of trying to find something like 2001:1684:435:6afe::feed, your
DNS service will you to simply use, i.g., pi.ws5b.com


As Doug mentioned, for incoming connections, you will need to port
forward on any router you have access to. Because the ISP's allocate on
a datalink level an IP address to you, the ports accessible to your
residential network at home are going to be more controlled - you would
not believe how many people have no idea what they are doing on a
computer and really load ISP networks with their serious infected
computers and devices - just like all the poorly-maintained operating
cars on the road.

Should you get adventurous, you can create yourself an IPv6 tunnel
*routed* network to where-ever you have control, and then you will be
free to do whatever you like. At this time, Hurricane Electric (HE)
does not close ports; this is up to you to maintain network security.
And be sure it is there, the Chinese, Vietnamese, and various parts of
South America have thousands of corrupted, minionized machines that
WILL un-doubtably try to get into your stuff. I see it every day!


he.net is a great place to get seriously confused, but left curious
enough to know more.



Benjamin, KB9LFZ



On Thu, 2019-01-17 at 23:43 -0700, 
> Thanks Doug,
> This was a question for me to learn more about this stuff. It came up
> from
> when I was reading about other services being behind a NAT. I would
> also
> like to put in a severance system and They have the same problem.
> Some have
> suggested that going to IPV6 they found the ports open. This got me
> thinking that maybe this could work for my home nodes that are behind
> a
> NAT. Using iaxrpt or zoiper  requires cell service. Something we
> don't have
> the luxury of having especially mobile. I have manage to get my node
> to
> reach 50 miles in some cases and now with the autopatch working I can
> offer
> phone service stranded motorist. Even for the sheriff and fire
> department
> who is having a communication problem out here. Currently I have a Pi
> setup
> up at a data center in Alabama that a friend and fellow ham offered.
> I have
> a node there and that takes care of a way for someone to contact me.
> I'm
> sending him another Pi and I'll add a 2nd node to my mobile for a
> back
> channel for someone to call when I'm not on the hub.
> Chris Viningre
> 70 W. Roadrunner
> Salt Flat, Texas 79847
> C:(915) 504-1510
> chrisviningre at gmail.com
> Ham Radio Call Sign: WS5B
> Allstarlink Nodes:
> 45789 Southwest US Hub
> 45796 24h News and Nets
> 
> 
> 
> 
> On Thu, Jan 17, 2019 at 10:43 PM "Doug Crompton via ARM-allstar" <
> arm-allstar at hamvoip.org> wrote:
> 
> > Chris,
> > 
> >  If a port is behind NAT you cannot access it unless the owner of
> > the NAT
> > (router) allows you to by forwarding a port. By design router LAN
> > ports are
> > isolated from the outside world unless they are authorized. If you
> > don't
> > have control over the router inbound ports will not work from the
> > Internet.
> > It does not matter if it is IPV$ or IPV6.
> > 
> > I think I know your situation and if I am right what you should do
> > is set
> > up a node at your home on the Internet. Forward ports 222 TCP and
> > 4569 UDP
> > in your router. Setup IAXRPT password if you have not already. Then
> > use
> > either iaxrpt or zoiper on your phone when you travel or are away
> > from
> > home. Using this you would be connected to your home node. You
> > could also
> > setup Echolink at home and use it on your phone to connect assuming
> > where
> > you want to connect has Echolink. Most hubs and many user nodes
> > have it.
> > 
> > Another option is to use a phone hotspot and a node you take with
> > you. You
> > do not need any port forwarding to connect out. In this case if you
> > want to
> > sked with someone who is calling you have them connect to your home
> > node
> > and you connect to your home node from wherever you are.
> > 
> > 
> > *73 Doug*
> > 
> > *WA3DSP*
> > 
> > *http://www.crompton.com/hamradio
> > <http://www.crompton.com/hamradio>*
> > 
> > * <http://www.crompton.com/hamradio>*
> > 
> > On Thu, Jan 17, 2019 at 7:05 PM "Chris Viningre via ARM-allstar" <
> > arm-allstar at hamvoip.org> wrote:
> > 
> > > If my provider has IPV6 can this be used to access my hidden node
> > > from
> > > behind a NAT?
> > > 
> > > Chris Viningre
> > > 70 W. Roadrunner
> > > Salt Flat, Texas 79847
> > > C:(915) 504-1510
> > > chrisviningre at gmail.com
> > > Ham Radio Call Sign: WS5B
> > > Allstarlink Nodes:
> > > 45789 Southwest US Hub
> > > 45796 24h News and Nets
> > > _______________________________________________
> > > 
> > > ARM-allstar mailing list
> > > ARM-allstar at hamvoip.org
> > > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> > > 
> > > Visit the BBB and RPi2/3 web page - http://hamvoip.org
> > > 
> > 
> > _______________________________________________
> > 
> > ARM-allstar mailing list
> > ARM-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> > 
> > Visit the BBB and RPi2/3 web page - http://hamvoip.org
> > 
> 
> _______________________________________________
> 
> ARM-allstar mailing list
> ARM-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> 
> Visit the BBB and RPi2/3 web page - http://hamvoip.org