On Tue, 2010-12-07 at 10:01 -0600, Les Mikesell wrote:
On 12/7/10 9:07 AM, Adam Tauno Williams wrote:
site-local addresses are officially deprecated. If you want a device to only be available locally - block the traffic to/from that device.
So security will depend on every connection owner having a high level of knowledge about ipv6 internals?
Yes. Exactly like IPv4! (given that network security professionals have existed for a long time)
Install a stateful firewall just like with IPv4! Stateful firewalls being things created by people "having a high level of knowledge about ... internals".
Problem solved [for 99.44% of the population], just like IPv4!
And to add a nice sprinkling of obscurity - every time your computer reboots [or interface resets] it generates a different ["random"] IPv6 address within your *HUGE* subnet.