On 07/04/2017 01:29 AM, Per Jessen wrote:
James Knott wrote:
On 07/03/2017 05:13 PM, James Knott wrote:
The label is no longer used, but does not do any harm. Like I said, some things need to be updated. ;-) Actually, with IPv6 now becoming common, a few things need to be updated. I had to stop using openSUSE as a firewall, as I couldn't get it to work with DHCPv6-PD and setting up firewall rules for IPv6 was also an issue. I thought the latter was okay, but I have not heard if we have anything for the prefix distribution.
I had to add this to SuSEfirewall2 to get it to work: FW_FORWARD="2001:5c0:1108:3500::/56,2000::/3 \ 2000::/3,2001:5c0:1108:3500::/56" Also, it doesn't support separate rules for IPv4 & IPv6. PfSense makes a much better firewall.
Around here, IPv6 is being dished out to customers, usually without telling them. I have had at least 3 cases where people suddenly had IPv6 addresses. For Joe Consumer it isn't a problem of course, but I had one yesterday who couldn't understand why his dynamic dns updates weren't working - well, he was asking to have an A record set to the address of the client - which defaulted to using IPv6.
Did they not have IPv4 available too? Of course, you shouldn't need a dynamic DNS with IPv6, as your prefix should be static and you point the DNS to the MAC based addresses. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org