Hello IPv6: a minimal tutorial for IPv4 users

Re:Hello IPv6: a minimal tutorial for IPv4 users by yesco on Saturday January 27, 2024 @11:02PM (#39162445)

> No. I want an address that can connect to the hosts on the Internet, but I don't want random hosts on the Internet to connect to it.

Gotcha glad we are on the same page now, so you do want the functionality of an inbound deny all rule, which is configured by default on all consumer routers, regardless of if they are IPv6 or even NAT/IPv4.

Why in the world, would you ever, want to expose all your local hosts to the Internet by default after all? That would be insanity.

It also has nothing to do with IPv6.

[ Parent | on HN ]

Re:Hello IPv6: a minimal tutorial for IPv4 users by cyberax on Sunday January 28, 2024 @08:23AM (#39165484)

You can have simple DENY for inbound TCP connections, because you can simply block incoming SYN packets. But inbound stateless DENY can't deal with UDP, as there is no connection.

So your options are either to prohibit UDP (goodbye QUIC) or to have stateful tracking.

[ Parent | on HN ]