Re:Improving DNS Privacy with Oblivious DoH
by Denvercoder9 on Tuesday December 08, 2020 @05:07PM
(#25352041)
Any firewall worth its salt can do this with IPv6 as well. There's nothing on a technical level preventing it.
[ Parent
| on HN ]
Re:Improving DNS Privacy with Oblivious DoH
by OJFord on Tuesday December 08, 2020 @07:50PM
(#25353834)
iptables?
Of course it's technically possible, it's all just packets of data that you can change, at the end of the day. I just meant that the easy way to do it (AIUI) went away with IPv6 because you were never supposed to need to do that, and with v6 you 'don't'.
It's not like the purpose of firewalls is redirection.
Re:Improving DNS Privacy with Oblivious DoH
by Reelin on Wednesday December 09, 2020 @12:20AM
(#25355627)
I thought that iptables was the easy way to do it? (Both for IPv4 and IPv6.)
NAT66 is an experimental (10 years old IIUC!) RFC for one-to-one IPv6 mapping. While there's no RFC specifying an official method of masquerading behind a single address, AFAIK iptables "just works" (as long as you aren't running FreeBSD).