3 ms·
I think the problem with ipv6 is that people may enable firewall rules on ipv4, but completely forget about v6. With auto configuration you may be leaving yours
by chgs 2y ago
I think the problem with ipv6 is that people may enable firewall rules on ipv4, but completely forget about v6. With auto configuration you may be leaving yourself wide open.
By all means enable ipv4 and v6 but remember to ensure you firewall both.
- wmf 2y agoConsumer routers should be default deny so if you don't add any rules you're safe.
- chgs 2y agoOn the outbound? My IoT network has a very controlled list of allowed outbound targets in the ipv4 world. If I blindly enabled IPv6 I’d have to ensure I protected against that too. Of course I also do things like intercept UDP/53 and nat it to my pihole as some devices have hardcoded dns servers, which many purists claim is an “ugly hack”.
- RealStickman_ 2y agoNormal consumers have all outbound traffic open anyways.
- globular-toast 2y agoWhat router software makes it easy to enable the firewall for ipv4 but leave ipv6 completely open? Are these routers without a real firewall at all that just rely on NAT as a pseudo-firewall?