On 2023-04-29 09:35, Per Jessen wrote:
Carlos E. R. wrote:
On 2023-04-28 22:04, James Knott wrote:
On 2023-04-28 15:35, Per Jessen wrote:
Unless you have only a /64. Please correct me if I'm wrong. You're wrong. Look at Carlos' setup and his trying to bend over backward to prevent public access. The size of your prefix allocation does not matter, those 2^64 addresses are all publicly accessible.
His problem is with his firewall, not IPv6. I use pfSense and I can set up an excellent firewall for 1 /64 or 256.
And my ISP giving dynamic prefixes, which prevents many of the possible IPv6 uses.
Perhaps some yes, but depending on what you have in mind, it might just mean a bit more effort. What sort of "possible IPv6 uses" do you have in mind?
Oh, I'll tell you in a few years which thing I actually use :-)
Note - having a fixed prefix is _certainly_ much easier, but having one that regularly changes can be worked around. Besides, does it actually change in running operation? ie. does it change if you don't reboot the router?
Not usually, but rebooting the router is typically needed here when the TV service hangs, or some other issue. Can be a problem at the house, or a problem upstream somewhere. I have not written down a log of my router prefix, so I'm not sure if it has changed or not. It is in my ToDo list. I haven't rebooted my router since this Beta started, though. Still, as I just commented on the firewall log, I may need to punch holes in the computers firewalls because they are actually using IPv6 addresses that change suffix or prefix or both. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)