I see that lemmy.ml is the only major instance currently reachable over IPv6. When will lemmy.world join the modern internet?

  • Redex@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    1 年前

    In general, you should probably turn on your router’s NAT even for IPv6. What you mentioned is a security concern, and while yes, the IPv6 address space is enormous and finding a valid address is hard, if somebody already knows your IPv6 address it’s a lot easier. For a home user there isn’t really a reason for your ports to be accessible from the outside, and if you need such a thing, you can easily port forward specific ports.

    edit: To add to that, turning on your router’s NAT isn’t a problem, you can always port forward, the problem with IPv4 is that you’re behind two NATs, your router’s and your ISP’s. Because of this, you can’t actually open up any port to be publicly visible on the Internet, which is extremely frustrating.

    edit edit: Reply to my comment pointed out that what I suggest is retarded.

    • 2xsaiko@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 年前

      In general, you should probably turn on your router’s NAT even for IPv6.

      No, you should not! NAT is not needed with IPv6 and you should never use it unless you really know what you are doing.

      NAT is not a security feature, firewalls are, the default firewall rules from consumer routers are generally enough (allow outgoing, deny incoming except if it’s an existing connection). And if you’re concerned about others tracking hosts inside your network, the default settings of Privacy Extensions makes your device assign itself different IPs for outgoing connections every so often.