Nostr Web Client

blocking hetzner ipv6 is a security concern for us because they every regularly use entire /64s to attempt to DDoS us. preventing a service from functioning is a whole lot different than preventing federation because you don't like the dude who wrote the software and trying to equate it to that just makes you look foolish. I'm not advocating for the blocking of them but I am absolutely going to block hetzner ipv6 for our security.

Parker Banks 2y ago

nostr:npub108zt8c43ulvdwnax2txurhhr07wdprl0msf608udz9rvpd5l68ascvdkr5 nostr:npub1qq7hl5sl6z0l0ahk8f6a4uv5mkvlama7dyvucdmtwdva2zg24xnqyafedr nostr:npub10m75ad8pc6wtlt67f6wjeug4hpqurc68842ve5ne47u9lkjqa0lq8ja88s nostr:npub1ch8nj9yu4676fnwkzacu28mt4y002ezeryqyuhzfnzjw560sq5fqaysw60 nostr:npub1g32ed24hnjndf3hqpdagsxjhuwrwtzms33vz4pv9v5pj5rmmf6mqs9g2ar nostr:npub1znavx0efn9y7a9tjux6pchjdurmw2e84fxwxflmauupjz0558x0sqmwtpl nostr:npub1ajw6axeack23437kedc8pkwghneenrkh9ljfxxgxumr6t6k4rtvqecaj8d nostr:npub13d5g0pqs7nvtkwf6p5smske507axkt2znlgn888lxnzgj69nxvzqgqjhcn

ipv6 makes sense at least since I think fedi is pretty exclusive to ipv4. But I use hetzner, it's cheap, works fine for me.

Reply to this note

Please Login to reply.

Discussion

anime graf mays 🛰️🪐 2y ago

so did we. but the problem is hetzner is cheap and ignores any kind of abuse complaint that isn’t DMCA seemingly. so it allows people to spin up massive and cheap botnets with trillions of IPv6 addresses. i recently just entirely disabled IPv6 for poast and cleared our AAAA because it’s easier than trying to filter the IPs all the time.

or (ip.src in {2a01:4ff::/32 2a01:4f9::/32 2a01:4f8::/32 2400:8901::/32})