Nat is not a firewall…
Seriously. Unless you open up your Lan to the internet it functions the same way as ipv4 in respect to receiving unsolicited queries from the internet. All those are dropped.
Comment on finally got static IP from a new ISP
Darkassassin07@lemmy.ca 6 days agoI really don’t like the idea of every device automatically having a publicly reachable IP.
There’s certainly situations where that would be nice; but I’m quite fond of most equipment and services being behind a router and it’s firewall, requiring explicit configuration to be exposed to the open net.
Nobody outside my home network ever needs access to my toaster… (btw, why tf is my toaster wifi enabled…?)
Nat is not a firewall…
Seriously. Unless you open up your Lan to the internet it functions the same way as ipv4 in respect to receiving unsolicited queries from the internet. All those are dropped.
You would have to specifically open a port in your firewall before anyone could access a device over IPv6 on your network from the internet. Just like you would have to forward a port on IPv4.
I really don’t like the idea of every device automatically having a publicly reachable IP.
It’s kind of like AI or ‘the cloud’. Everything now has access to at least your wifi. Hell, even my rumba has wireless access. I didn’t activate that feature. I live in a very small house. If I want to restart it, I can walk over to it and push the restart button. Refrigerators with flat screen embedded in the door? Who is that for? I just want my fridge to keep everything cold. I absolutely love technology. I think it’s wonderful. However, imho, not everything needs internet access, or AI, or ‘the cloud’. I did build a little ‘magic mirror’ a while back that alerts me about weather, schedules, keeps track of a couple of my 25 different security cams, but that’s about it. I haven’t purchased a vehicle in quite a long while now, but I would guess the gadgetry saturation is pretty high.
possiblylinux127@lemmy.zip 6 days ago
A Firewall and NAT are to different things. All devices would still be behind a Firewall so they would effectively be invisible from the outside except for when they make an out going connection.
If you really want NAT for IPv6 you could use NAT66. It isn’t technically the IPv6 way of doing things but it works.