2 ms·
> No. I want an address that can connect to the hosts on the Internet, but I don't want random hosts on the Internet to connect to it. Gotcha glad we are on th
by yesco 3y ago
> No. I want an address that can connect to the hosts on the Internet, but I don't want random hosts on the Internet to connect to it.
Gotcha glad we are on the same page now, so you do want the functionality of an inbound deny all rule, which is configured by default on all consumer routers, regardless of if they are IPv6 or even NAT/IPv4.
Why in the world, would you ever, want to expose all your local hosts to the Internet by default after all? That would be insanity.
It also has nothing to do with IPv6.
- cyberax 3y agoYou can have simple DENY for inbound TCP connections, because you can simply block incoming SYN packets. But inbound stateless DENY can't deal with UDP, as there is no connection. So your options are either to prohibit UDP (goodbye QUIC) or to have stateful tracking.