Lew Wolfgang wrote:
On 09/12/2016 08:32 AM, Per Jessen wrote:
Surely this is the typical firewall config in any average xDSL modem/router :
IPv4+NAT - all inbound ports blocked, only locally initiated traffic allowed. To enable external access to a service, you need to configure port forwarding. (send port 80 to address 192.168.77.123).
IPv6 - all inbound ports blocked, only locally initiated traffic allowed. To enable external access to a host/service, you need to open an address::port combo. (allow port 80 for 2001:db8:1711:45)
Did I miss something?
That sounds good, and I'd assume it will be so. But you certainly know where the devil lives! If this was easy wouldn't v6 switchover have been completed many years ago?
I am certain it _is_ that easy, but the business case for moving to IPv6 seems to have remained stable, or maybe even slowly diminished. Despite the IPv4 pool having run out, it is not yet empty - unused IPv4 ranges are being discovered/returned etc. I'm not well-connected in the telco world, so I have no detailed knowledge, but when they're not actively pushing people to IPv6, I can only assume it means there is still sufficient IPv4 addresses.
I'll report on my adventures with my router when I get a chance to fiddle with it.
Let us know how it goes - that first traffic over IPv6 feels a little like the first time your 2400baud dial-up modem sync'ed. -- Per Jessen, Zürich (26.8°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org