• 0 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: July 20th, 2023

help-circle



  • Take wiht a bit (or a lot) of salt what I am gonna say. Because undoubtedly I am. Missing something here.

    But if what you a already say is true probably you are not restricting anything. The recommended way to do so is with a firewall rule (probably in your router).

    You are extending the subnet definition beyond the 16 bits. This can create problems and I doubt that your router will block anything if something crafted is received from Internet.

    But of course, being the extremely big address space your are probably safe.

    I any case, with a firewall rule in your router allowing only the proxy to go receive connections, you should be good and more standard conform


  • This is not the Nat functionality as people associated with ipv4, and certainly it is not showing the drawback of allowing the communication only when the NATed client started the communication.

    Even if they are alike they are not the same.

    I reaffirm myself here. It is possible to have full ipv6 communication and providers do not have cgnats. It is your easiest and most uncomplicated solution with almost nothing to install to make it work.

    And in addition, I have to say that I don’t see any benefit in using such functionality at home. If someone can illustrate me a use case I would be thankful