Hello
which alias/ filterlist aka, spamhaus, do you use for IPv6?
I use geoip too.
Which list are "good"?
greetings
Thomas
I use FireHOL level 1, 2 and 3.
I thought it was mixed, sorry. Need to check myself.
There isn't many list that can do ipv6 . I have used Blocklist de and Dan.me.uk tor lists the other is the matrail scanner list that i'm aware of. But there crowdsec witch kind like a blocklist. I had the same question when i was trying pfsense.
Yeah, Spamhaus DROPv6 seems to be the only one.
One contributing factor might be that port scans via IPv6 are still rare and possible will be forever. Other than a targeted attack e.g. via the public list of issued certificates you simply cannot scan the IPv6 address space.
While IPv4 space is scanned exhaustively 24x7 IPv6 is legacy address space squared (!) networks (/64) with again legacy address space squared possible hosts in each. And if you don't number your hosts e.g.
<prefix>::1
<prefix>::2
<prefix>::3
...
but use e.g. SLAAC or even randomly generated addresses, that vast space is populated really sparse.