21 Apr
2023
21 Apr
'23
12:29
On Fri, Apr 21, 2023 at 3:23 PM James Knott <james.knott@jknott.net> wrote:
On 2023-04-21 03:11, Andrei Borzenkov wrote:
Pragmatic answer - do not use IPv6 inside your LAN and simply block IPv6 except ports you want to make available from outside.
You could also block all IPv6 packets from your router MAC address.
Then he might as well not even have IPv6.
He will have outgoing connectivity to IPv6 sites. Which is exactly what we have with IPv4 behind NAT.