Добро пожаловать, Гость. Пожалуйста авторизуйтесь здесь.
FGHIGate на GaNJa NeTWoRK ST@Ti0N - Просмотр сообщения в эхоконференции IPV6
Введите FGHI ссылку:


Присутствуют сообщения из эхоконференции IPV6 с датами от 31 Jul 11 14:37:00 до 03 Oct 24 21:46:09, всего сообщений: 7440
Ответить на сообщение К списку сообщений Предыдущее сообщение Следующее сообщение
= Сообщение: 1764 из 7440 ============================================= IPV6 =
От   : Michiel van der Vlist            2:280/5555         03 Oct 15 15:06:39
Кому : Markus Reschke                                      03 Oct 15 15:06:39
Тема : Raspeberry Pi / SixXS
FGHI : area://IPV6?msgid=2:280/5555+560fd65e
На   : area://IPV6?msgid=2:240/1661+56043316
= Кодировка сообщения определена как: CP850 ==================================
Ответ: area://IPV6?msgid=2:240/1661+56043318
Ответ: area://IPV6?msgid=2:280/5003.4+56100e9f
==============================================================================
Hello Markus,

On Saturday October 03 2015 10:49, you wrote to me:


MR> I agree, that PE is nonsense for a server. Also SLAAC/DHCPv6 aren't
MR> helpful  in this case. But it's not generally a bad idea to enable PE
MR> for PCs with a static prefix. SLAAC assigned addresses are based on
MR> the NIC's MAC address. If you want to make life a little bit harder
MR> for all those trackers, PE comes in handy.

Indeed the MAC address gives out some information. I doubt it is all that useful for a hacker and if he wants the MAC address that he can not entice the system to reveal it in some other way.

MR> And DNS is no real issue since most are used to DynDNS for quite a
MR> while.

Really? I haven't used it in years.. And only for IPv4, never for IPv6.

MR> With SLAAC you would have to manage DNS dynamically anyway, because a
MR> new NIC (replacement for a broken one, new mainboard) will cause a new
MR> IPv6 address. You don't want this to happen for a server.

For a professional that may be an issue. For a hobby server. Mwah.. it seldom happens and changing the AAAA record is no big deal..

MR> My IPv6 prefix is valid for up to 6 months, if the DSL connection
MR> stays up and running all the time. But it doesn't due to the telco's
MR> maintenance windows and maybe some power outage and what have you. So
MR> I had to set up DynDNS anyway. It doesn't matter for me if the address
MR> changes every 24h or every few weeks/months, it's monitored and DNS
MR> will be updated if necessary.

I wonder what excuse the ISPs have for not simply issuing static IPv6 prefixes. Dynamic addresses made sense in the dial up age, when a small poool of adresses could be used for many more users because they never were on line all at once. That chaged with te coming of home routers that usually were left on 24/7 and so occupied an IP address 24/7. They needed one address per customer anyway.

With IPv6 there never was such an excuse anyway. There is no shortage of addresses and there will not be for the foreseeable future. Why not give everyone a static prefix?

AFAIK, the Dutch IPSs that offer native IPv6 all issue static prefixes.


Cheers, Michiel

--- GoldED+/W32-MSVC 1.1.5-b20130111
* Origin: 2001:470:1f15:1117::1 (2:280/5555)

К главной странице гейта
Powered by NoSFeRaTU`s FGHIGate
Открытие страницы: 0.049171 секунды