tag:blogger.com,1999:blog-3993498847203183398.post3016669029182417617..comments2024-03-29T10:25:14.642+00:00Comments on RevK<sup>®</sup>'s ramblings: NAT is evil, and really, not a good firewall, honestRevKhttp://www.blogger.com/profile/12369263214193333422noreply@blogger.comBlogger8125tag:blogger.com,1999:blog-3993498847203183398.post-50034873779849415602019-01-28T17:45:45.493+00:002019-01-28T17:45:45.493+00:002222Anonymoushttps://www.blogger.com/profile/15750897810404733475noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-6153255319032742702017-11-14T11:36:30.869+00:002017-11-14T11:36:30.869+00:00Ok that's good to know.
And yes and no, while...Ok that's good to know.<br /><br />And yes and no, while I do have some level of IPv6, it's only the local addresses (starting fe80?) And I turned the rest off when I set it all up. Was a case of "I don't understand it yet so let's turn it off for now". <br /><br />I have my V6 allocation so would make sense to start using that, especially for public facing stuffGeekypenguinhttps://www.blogger.com/profile/04249663681946505777noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-60336661239262825082017-11-14T11:27:09.751+00:002017-11-14T11:27:09.751+00:00Most routers will automatically block incoming IPv...Most routers will automatically block incoming IPv6 sessions just as they do for an IPv4 NAT set-up. Usually IPv6 is allocated automatically on a LAN by the router. Generally, for an end user, it is simple and automatic - are you sure you don't have IPv6 already?RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-37005578745253447092017-11-14T11:23:45.339+00:002017-11-14T11:23:45.339+00:00Rev, I know I am one of the many people that wrong...Rev, I know I am one of the many people that wrongly use NAT as a very crude firewall along with a basic set of firewall rules to explicitly allow or deny certain connections. <br />As a result I am hesitant to start using IPv6 as I don't really know how to set it all up properly. <br />Have you done/plan to do a primer or easy intro to setting up IPv6 the right way, or know of any good guides already? I've found online resources severely lacking or way too specificGeekypenguinhttps://www.blogger.com/profile/04249663681946505777noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-27919634001990100472017-11-07T07:27:35.020+00:002017-11-07T07:27:35.020+00:00Quite, you can enable on per subnet basis and see ...Quite, you can enable on per subnet basis and see what mappings are created even if your fire-walling rules say they will not work.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-66042269903889515162017-11-07T07:26:21.889+00:002017-11-07T07:26:21.889+00:00Given the scope be nice to even know what had trie...Given the scope be nice to even know what had tried but failed.Anonymoushttps://www.blogger.com/profile/04106608439342270314noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-34589192442008889762017-11-06T18:09:42.300+00:002017-11-06T18:09:42.300+00:00Status, yes, already in alpha release. email alert...Status, yes, already in alpha release. email alerts, well, firewall rules allow that if you want.RevKhttps://www.blogger.com/profile/12369263214193333422noreply@blogger.comtag:blogger.com,1999:blog-3993498847203183398.post-29213505595114744052017-11-06T18:08:42.675+00:002017-11-06T18:08:42.675+00:00So will there be an extra Status tab showing which...So will there be an extra Status tab showing which ports are open and mapped by NAT-PMP? That would be cool.<br />Maybe email alerts?SimonFhttps://www.blogger.com/profile/03711861360301638111noreply@blogger.com