On 2023-04-28 15:35, Per Jessen wrote:

Unless you have only a /64.  Please correct me if I'm wrong.

You're wrong.  Look at Carlos' setup and his trying to bend over
backward to prevent public access.  The size of your prefix allocation
does not matter, those 2^{^64} addresses are all publicly accessible.

His problem is with his firewall, not IPv6. I use pfSense and I can set up an excellent firewall for 1 /64 or 256.