Johannes Weber 🎸

6K posts

Johannes Weber 🎸 banner
Johannes Weber 🎸

Johannes Weber 🎸

@webernetz

IT-security, networks, #IPv6, #VPN, #DNSSEC, #NTP. Christian, husband and father of three. 🇩🇪

Butzbach, Deutschland Katılım Ekim 2013
264 Takip Edilen1.9K Takipçiler
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
I had hoped that Twitter would recover. But after Elon's latest actions, I will avoid this platform as well. What a pity. I have enjoyed spending the last decade here, but now it's over!
English
2
0
1
398
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
Interesting #IPv6 bug on FortiOS (at least 7.6.1): "get router info6 routing-table" does not show the default route (same in the GUI), learned via an RA on wan1, while "diagnose ipv6 route list" does. 🤔
Johannes Weber 🎸 tweet media
English
4
2
6
925
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
#IPv6-related bug on FortiOS 7.6.1 (at least): RSs are not replied by RAs. Clients have no working IPv6 until the first regular RA kicks in. Workaround: Lowering the ip6-min-interval and ip6-max-interval values.
Johannes Weber 🎸 tweet media
English
1
4
7
1K
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
I tried FortiOS 7.6.1, and it IS working. ✅ Don't know why. ;) The 3-second delay is still there, but the Fritzbox now sends a valid reply. 🤷🏼
Johannes Weber 🎸 tweet media
English
0
3
4
539
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
I'm facing a weird problem related to DHCPv6 between a FortiGate (client) and a Fritzbox (server). The final Reply has a "NoBinding" status code. All messages seem valid to me. Maybe because of the 3-second delay before the Request? Any thoughts? @ehorley @AVM_DE @Fortinet
Johannes Weber 🎸 tweet mediaJohannes Weber 🎸 tweet media
English
2
1
2
585
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
"This may require a reboot. I am not sure of that, and it might depend on FortiOS version. I think FortiOS 6.0.1, where I tested that, just needs a couple minutes time to assign the interface its address, but I’m not 100% certain of that." thorsten-on-tech.blog/2018/06/08/ipv…
English
0
0
1
166
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
Configuring IPv6 on a Palo: Setting exactly what you want, commit, works✅ Configuring IPv6 on a Forti: GUI vs. CLI, which commands are needed?, testing, validation error, typing again, googling, next end next, GUI vs CLI, reading docs vs. blog posts, Wiresharking, not working❌
English
1
0
2
337
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
"Currently, Palo Alto firewalls do not support IPv6 geo-location, which is why the traffic logs show the location as 'unknown'." Palo Alto Networks, Nov. 2024. #IPv6
English
5
2
46
5.3K
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
*DEATH*: Detection Engineering and Threat Hunting Haha, yet another acronym, learned from Stephen Donnelly, at @wiresharkfest '24 EU.
English
0
1
3
277
Johannes Weber 🎸
Johannes Weber 🎸@webernetz·
@it__security Naja, bitte die Kirche im Dorf lassen. Es handelt sich hierbei um eine Schwachstelle von "Expedition", einem reinen Migrationwerkzeug, was wohl kaum von irgendjemandem public über das Internet erreichbar sein dürfte.
Deutsch
0
0
0
26
it security
it security@it__security·
🚨 Die amerikanische Behörde für Cybersicherheit #CISA hat am Donnerstag Alarm geschlagen: Eine schwerwiegende Sicherheitslücke in der #Software des IT-Sicherheitsunternehmens #PaloAlto Networks werde bereits aktiv von Angreifern ausgenutzt. it-daily.net/shortnews/sich…
Deutsch
1
0
1
131