From e3cc74c4b20169e6346f701192e9b0d7f5a3f692 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20M=2E=20Sapka?= Date: Fri, 5 May 2023 14:00:41 +0200 Subject: fix: typo --- content/2023/fixing-ipv6-and-securing-the-domain.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'content/2023/fixing-ipv6-and-securing-the-domain.md') diff --git a/content/2023/fixing-ipv6-and-securing-the-domain.md b/content/2023/fixing-ipv6-and-securing-the-domain.md index ff2ad02b..99aad289 100644 --- a/content/2023/fixing-ipv6-and-securing-the-domain.md +++ b/content/2023/fixing-ipv6-and-securing-the-domain.md @@ -11,7 +11,7 @@ tags: - DNSSEC - Ok --- -HSTS, so [recent IPv6 enablement](/2023/now-served-from-ipv6/) didn't went smooth. Even though I've added the AAAA record and I was able to `ping6(8)` from my FreeBSD machine, I forgot about configuring the firewall. Sadly, I know very little about `pf.conf(5)`, so I used a [ready config](https://forums.FreeBSD.org/threads/ipv6-not-working-with-pf.66772/post-395165), changed the network interface, and added ssh. Voila, IPv6 works! Thanks for letting me know about this bug on my side, [Marco](https://twitter.com/marcodavids/status/1653862517309882369). +Ok, so [recent IPv6 enablement](/2023/now-served-from-ipv6/) didn't went smooth. Even though I've added the AAAA record and I was able to `ping6(8)` from my FreeBSD machine, I forgot about configuring the firewall. Sadly, I know very little about `pf.conf(5)`, so I used a [ready config](https://forums.FreeBSD.org/threads/ipv6-not-working-with-pf.66772/post-395165), changed the network interface, and added ssh. Voila, IPv6 works! Thanks for letting me know about this bug on my side, [Marco](https://twitter.com/marcodavids/status/1653862517309882369). Then I added [Domain Name System Security Extensions](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions). It's a security mechanism that cryptographically secures against man-in-the-middle attacks on the DNS level. I've enabled it in Vultr and copy-pasted a few records to Namecheap. Voila, it works! -- cgit v1.2.3