Hi
I need a little help with Teredo, so I'm bringing up the its security issues again... Please bear with me... :-)
I have 2 computers in a homegroup at home (Windows 7 Ultimate 64 bits and Windows 7 Home Basic 32 bits), behind a TP-Link TL-WR740N router (and ZoneAlarm Free 9.2.076.000 - IPV6 compliant).
Both computers have Teredo enabled (due to homegroup being used) and the same programs installed, but the Ultimate one is always running ("qualified"), whereas the Home basic one is mainly "dormant", unless, of course, I try to reach a website which "triggers" Ipv6 (e.g. "Test your IPv6").
Trying to figure out why the Ultimate computer had the Teredo connection always "qualified" led me to dig deep into the Teredo Tunneling issue, and I became somewhat scared of the security risks in using it.
I learned that, apart from opening a "hole" in the router and assigning a global IPv6 address to the computer, the traffic in the tunnel is really IPV6 encapsulated in a IPv4 packet, so the firewall won't be able to filter it properly, applying the desired security policy.
The safest thing to do is disable it, but I guess that's not possible (it would prevent the homegroup from running).
So, in my current configuration (nobody but my family has access to the machines), how much of a real threat is Teredo? Does Zonealarm help at all?
Looking forward to hearing your opinions!
Thanks in advance!
Giacinto
