[v6ops] Re: Traffic control protocols (PCP and UPnP IGD)

[Gert Doering <[e-mail]>]

Hi,

On Fri, Jul 26, 2024 at 01:41:30PM -0700, Ted Lemon wrote:
> This makes perfect sense if your threat model is that services that aren't
> intended to be reachable from the internet become automatically reachable
> from the Internet. E.g., I don't want some rando in Liechtenstein suddenly
> playing Scriábin on my Homepod stereo pair (well, unless it's really good,
> i guess). But I do want to be able to ssh in to my desktop machine. I don't
> want my ISP to be able to block that because there's a firewall in the
> cable modem that can't be configured.

So how do you tell your can't-be-configured firewall that the Homepod
"play my song" port must not be talked to, while the SSH port is fine?

The Homepod might not be configurable either, to tell it "DO NOT ASK!",
and neither might be whatever you have on your machine that is not SSH but
should not be talked to...

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Ingo Lalla,
                                           Karin Schuler, Sebastian Cler
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: [phone]         USt-IdNr.: DE813185279