On 4/21/23 03:22, Dave Howorth wrote:
On Fri, 21 Apr 2023 11:16:06 +0200 "Carlos E. R." <robin.listas@telefonica.net> wrote:
On 2023-04-21 09:33, Per Jessen wrote:
Why not just set up the ipv6 firewall in your router? It is set. Doesn't work. It seems to me that the simplest and best answer is likely to be to put another small box between your ISP-supplied router and your internal network. It needs two ethernet ports. You can run whatever firewall you want on it (pfSense? opensuse? ?) but it can easily distinguish traffic to/from outside by which interface it arrives on and what its destination is.
+1 That's what I do with a Zyxel USG40 router/firewall. This way you don't have to trust your ISP to get your security right. I personally don't see any reason to use IPv6 at this time, it's easy to just block everything at the router. Regards, Lew "If thy IPv6 offends thee; pluck it out!"