diff options
| author | Michał M. Sapka <michal@sapka.me> | 2023-05-05 14:00:41 +0200 |
|---|---|---|
| committer | Michał M. Sapka <michal@sapka.me> | 2023-05-05 14:00:41 +0200 |
| commit | e3cc74c4b20169e6346f701192e9b0d7f5a3f692 (patch) | |
| tree | 2c39d23ec83684f57403d61d7f473360756099fc /content/2023/fixing-ipv6-and-securing-the-domain.md | |
| parent | f7186342bcbeef5bd9d72889e9b95145c6545dea (diff) | |
fix: typo
Diffstat (limited to 'content/2023/fixing-ipv6-and-securing-the-domain.md')
| -rw-r--r-- | content/2023/fixing-ipv6-and-securing-the-domain.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/content/2023/fixing-ipv6-and-securing-the-domain.md b/content/2023/fixing-ipv6-and-securing-the-domain.md index ff2ad02b..99aad289 100644 --- a/content/2023/fixing-ipv6-and-securing-the-domain.md +++ b/content/2023/fixing-ipv6-and-securing-the-domain.md @@ -11,7 +11,7 @@ tags: - DNSSEC - Ok --- -HSTS, so [recent IPv6 enablement](/2023/now-served-from-ipv6/) didn't went smooth. Even though I've added the AAAA record and I was able to `ping6(8)` from my FreeBSD machine, I forgot about configuring the firewall. Sadly, I know very little about `pf.conf(5)`, so I used a [ready config](https://forums.FreeBSD.org/threads/ipv6-not-working-with-pf.66772/post-395165), changed the network interface, and added ssh. Voila, IPv6 works! Thanks for letting me know about this bug on my side, [Marco](https://twitter.com/marcodavids/status/1653862517309882369). +Ok, so [recent IPv6 enablement](/2023/now-served-from-ipv6/) didn't went smooth. Even though I've added the AAAA record and I was able to `ping6(8)` from my FreeBSD machine, I forgot about configuring the firewall. Sadly, I know very little about `pf.conf(5)`, so I used a [ready config](https://forums.FreeBSD.org/threads/ipv6-not-working-with-pf.66772/post-395165), changed the network interface, and added ssh. Voila, IPv6 works! Thanks for letting me know about this bug on my side, [Marco](https://twitter.com/marcodavids/status/1653862517309882369). Then I added [Domain Name System Security Extensions](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions). It's a security mechanism that cryptographically secures against man-in-the-middle attacks on the DNS level. I've enabled it in Vultr and copy-pasted a few records to Namecheap. Voila, it works! |