Firewall, IPv6, your own router

This page is for you if you want to go deeper. For everything else, just ask support.

Firewall

A firewall protects the dormitory network from the internet. The configuration is not very restrictive: it stops many simple attacks from outside, but not all of them — and in particular not attacks from other residents targeting your own computer.

For outgoing connections, all ports are open. These ports are open in the incoming direction:

• FTP (port 20/21 UDP/TCP)
• SSH (port 22 TCP)
• HTTP (port 80 TCP)
• IDENT (port 113 TCP)
• HTTPS (port 443 TCP)
• IPSec (port 500 UDP, IP protocols 50, 51)
• ports 50000–50010 TCP
• ports 50000–50010 UDP

We can no longer guarantee a public IPv4 address for every connection. IPv6 is available throughout the network.

IPv6

IPv6 is available throughout the StudNet. As soon as your device is connected, it is assigned an IPv6 prefix automatically.

For privacy reasons you get a different prefix each time you connect. If you need a permanent IPv6 subnet, switch on Static IPv6 IP/subnet under Settings in your account. The change takes effect after you unplug the device from the wall socket for 12 minutes and plug it back in.

Open your account
netstat.stw-bonn.de

To test your IPv6 connection, there are dedicated test pages on the Internet:

• ipv6test.google.com
• ipv6.watch

Linux router

You can also run your own router in the StudNet, for example a computer with Linux as its operating system.

For your own local subnet, use the network 172.16.0.0/24, i.e. the addresses 172.16.0.0–172.16.0.255. All other private address ranges are partly used by our servers and internal networks and should be avoided.