twitter's Journal: Security Experts: Block Teredo, Vista's IPv6 Networking

Symantec and Ericsson security experts are concerned that, Teredo, Vista's IPv6 networking, bypasses network security through such devices as firewalls and recommend blocking it.

"Teredo is not recommended as a solution for managed networks. Administrators of such networks may wish to filter all Teredo traffic at the boundaries of their networks. The easiest mechanism for this would be to filter out incoming traffic with Source Port 3544 and outgoing traffic with Destination Port 3544."

Teredo is enabled by default in Windows Vista [and] network managers may not be aware that some of their hosts are using IPv6 through Vista and are now globally addressable.

The authors go on to list six or seven problems that revolve around the lack of tools to inspect and filter M$'s new system. Unspoken is the simple fact that Windows is still not ready for the internet and needs special protection.