Re:Tell HN: IPv6-only still pretty much unusable
by sph on Wednesday December 07, 2022 @12:43PM
(#33897484)
My shitty router also firewalls incoming IPv6 connections by default, unless I manually allow them per-device, so I don't get your point.
Re:Tell HN: IPv6-only still pretty much unusable
by jraph on Wednesday December 07, 2022 @12:55PM
(#33897649)
My point is lzaaz's one https://news.ycombinator.com/item?id=33897568
I didn't think of my cable modem as a firewall. Maybe technically it has one to provide the feature of blocking access to its web interface from the world, or maybe it just listens to the right network. I don't know, but for all intent and purposes, setting up a firewall myself does not seem necessary.
To be fair, I was also a bit annoyed by staringback's phrasing.
[dead]
Re:Tell HN: IPv6-only still pretty much unusable
by jraph on Wednesday December 07, 2022 @12:45PM
(#33897531)
What's with the attacks??
I make sure what I build supports IPv6 (and I'll use tunnels if it's what it takes) but I can't make the only cable ISP available at my place support IPv6. I wish it did. I wish I didn't have to use its garbage hardware.
I don't understand why you'd need a firewall if
- you trust devices on your network (yes, big if, but even then: the only reachable ports of a machine from the outside are those explicitly open to the outside, most stuff listens to 127.0.0.1 anyway)
- you only configure your NAT to forward ports you would open on your firewall