nanog mailing list archives
Re: Netflix VPN detection - actual engineer needed
From: Baldur Norddahl <baldur.norddahl () gmail com>
Date: Wed, 8 Jun 2016 17:13:04 +0200
On 2016-06-08 07:27, Mark Andrews wrote:
In message <20160608070525.06fd5995 () echo ms redpill-linpro com>, Tore Anderson writes:* Davide Davini <diotonante () gmail com> Blocking access to Netflix via the tunnel seems like an obvious solution to me, for what it's worth.And which set of prefixes is that? How often do they change? etc.
A start would be blocking 2620:108:700f::/64 as discovered by a simple DNS lookup on netflix.com. I am not running a HE tunnel (I got native IPv6) and I am not blocked from accessing Netflix over IPv6 so can't really try it. I am curious however that none of the vocal HE tunnel users here appears to have tried even simple counter measures such as a simple firewall rule to drop traffic to that one /64 prefix.
It might be that more needs to be blocked, but in that case it will be trivial to find the required prefixes by launching Wireshark and observe the IPv6 traffic generated when accessing netflix.com. Maybe someone could do that and post the results, as it is apparent that many people are in need of a solution.
Regards, Baldur
Current thread:
- Re: Netflix VPN detection - actual engineer needed, (continued)
- Re: Netflix VPN detection - actual engineer needed Cryptographrix (Jun 03)
- Re: Netflix VPN detection - actual engineer needed Cryptographrix (Jun 03)
- Re: Netflix VPN detection - actual engineer needed Eric Kuhnke (Jun 03)
- Re: Netflix VPN detection - actual engineer needed Alex Buie (Jun 03)
- Re: Netflix VPN detection - actual engineer needed Mikael Abrahamsson (Jun 03)
- Re: Netflix VPN detection - actual engineer needed Owen DeLong (Jun 04)
- Re: Netflix VPN detection - actual engineer needed Mikael Abrahamsson (Jun 04)
- Re: Netflix VPN detection - actual engineer needed Davide Davini (Jun 07)
- Re: Netflix VPN detection - actual engineer needed Tore Anderson (Jun 07)
- Re: Netflix VPN detection - actual engineer needed Mark Andrews (Jun 07)
- Re: Netflix VPN detection - actual engineer needed Baldur Norddahl (Jun 08)
- Re: Netflix VPN detection - actual engineer needed Steve Atkins (Jun 08)
- Re: Netflix VPN detection - actual engineer needed Nicholas Suan (Jun 08)
- Re: Netflix VPN detection - actual engineer needed Baldur Norddahl (Jun 08)
- Message not available
- Re: Netflix VPN detection - actual engineer needed Baldur Norddahl (Jun 08)
- Re: Netflix VPN detection - actual engineer needed Antonio Querubin (Jun 09)
- Re: Netflix VPN detection - actual engineer needed Antonio Querubin (Jun 09)
- Re: Netflix VPN detection - actual engineer needed Mikael Abrahamsson (Jun 07)
- Message not available
- Re: Netflix VPN detection - actual engineer needed Owen DeLong (Jun 08)
- Re: Netflix VPN detection - actual engineer needed Davide Davini (Jun 14)
- Re: Netflix VPN detection - actual engineer needed Blair Trosper (Jun 03)