Home Network IP Address Scheme Best Practice

[jmwills 284]

So you want to expose your internal network directly to the internet? Go ahead.

[nrf 111]

this seems like a blunt statement. aren't there still firewall protections provided by the 'router' component?

[mnbf9rca 2]

this seems like a blunt statement. aren't there still firewall protections provided by the 'router' component?

 

indeed - just because it's routable doesnt mean all traffic can pass. The router is still acting as a firewall to allow in only traffic relating to existing sessions, or traffic i specifically allow (like to specific ports on servers etc.)

[jmwills 284]

But you're still only getting one external IP address from the ISP, unless you are running a business class model.  I know of NO ONE running IPv6 on their internal networks and I work for one of those three letter agencies.

[GotNoTime 219]

But you're still only getting one external IP address from the ISP, unless you are running a business class model.

Which is why IPv6 gives you so much more flexibility. You avoid NAT which causes a lot of unnecessary complication and breakage. You don't need to setup static port forwarding rules. You don't need to deal with the security hole that is UPnP. You're able to have multiple servers using the standard defined ports.

 

I know of NO ONE running IPv6 on their internal networks and I work for one of those three letter agencies.

Comcast 100% completed their roll out of dual stack IPv4 + IPv6 last year. The large ISPs in the UK are rolling out IPv6 as well now. Smaller nice ISPs have already had IPv6 for years now.

[Trig0r 171]

I know of NO ONE running IPv6 on their internal networks and I work for one of those three letter agencies.

 

Well thats just a challenge now isnt it lol...

 

IRS...?

[jmwills 284]

Sorry.  Cannot divulge that.

[Trig0r 171]

lol, tell us you work for a 3 letter agency but then not which one, I've figured it out, given you tell us you work for one clearly isn't what someone that worked for one would do, so, it UPS isn't it.....

 

 

Sent from my iPad using Tapatalk

[mnbf9rca 2]

is it the HUD?https://www.usa.gov/federal-agencies/department-of-housing-and-urban-development

[nrf 111]

3 letter agencies aside, my ISP gives a ipv4 ip address, a 128 bit ipv6 address,  plus a 64-bit ipv6 delegated prefix (range) which is distributed among the lan members. maybe sophos is considered a "business class model" but this seems like a very conventional ipv6 scenario