Movistar mobile IPv6 exposes all ports to the public internet

Movistar mobile IPv6 leaves all your ports exposed

The transition to IPv6 on Movistar's mobile network has brought a security surprise: every device receives a public address with all ports exposed to the internet by default. With traditional NAT removed, the average user is left exposed without knowing it, turning their phone or a PC connected to their hotspot into a potential target for malicious scans.

A false sense of security behind NAT
The forum is debating how the network architecture of Movistar and O2 exposes local services that previously remained hidden behind the address translation layer (NAT). While some users warn that this makes attacks through malicious websites easier, others argue that the operator's lack of an active firewall amounts to deliberate negligence. The reality is that if you connect a PC to your mobile hotspot, you are leaving the door wide open to the public network.

Technical solutions or temporary patches?
The proposed alternatives range from the complex to the ineffective. Some suggest using firewalls such as NetGuard or AFWall+ to mitigate the risks, while others simply disable IPv6. However, this last option has unexpected consequences: services like YouTube start restricting access or demanding user accounts, showing how the operator ties the network's functioning to this protocol.

The debate remains open over whether it is the user's responsibility to protect their devices or whether Movistar should implement a firewall by default. Meanwhile, the mobile network continues to operate under a configuration that prioritises connectivity over end-user security.

Related forum discussions

• Last year the IEA predicted EV sales would reach 40% by 2030; now they forecast 30% this very year · 28 replies
• Don't fall for Carrefour's staged pantomime, my children · 47 replies
• Does anyone know people who have won a big prize in the Bonoloto? · 21 replies
• Spanish omelette, KFC and a 20,000-euro wine · 24 replies