Firewall Changes!

Over the past few months, our team has been seeing a fairly serious increase in scanner traffic and unwanted connection attempts ramping up over IPv6. In response, and to avoid our traffic accounting getting skewed for our members, we are reverting our default stance of having the v6 side of the network operating in pass through.

As of today, the default configuration will be everything from outside denied, unless our members raise a ticket asking for port ranges to be opened to certain addresses on their subnet. This is being done due to various parts of our network seeing upwards of 3GB+ per day in just noise from internet asbestos. ICMP will still pass through to everywhere as normal.

Author: Skylar.W