undefined | Better HN

0 pointsgeneral14652mo ago0 comments

So having all devices on public addresses was stupid to begin with on IPv4 and it was arrogantly stupid on IPv6.

0 comments

6 comments · 2 top-level

orangeboats2mo ago· 3 in thread

The fact that we are giving IP addresses an hierarchy is stupid. If you don't want outsiders to connect to your device use a firewall.

general1465OP2mo ago

Or use NAT, which is actually better solution, because misconfigured NAT won't expose your whole network, while misconfigured firewall will.

Dagger22mo ago

Well, actually it will. In fact, even correctly configured NAT won't stop connections into your network.

On top of that, it lulls you into a false sense of security, so you confidently think it's protecting you even when it isn't. At least not having NAT makes the actual state of your network clearer.

general1465OP2mo ago

> even correctly configured NAT won't stop connections into your network.

Yeah that's called port forwarding. It is like complaining that light is coming into your house through windows. Fully intentional.

1 more reply

throw0101d2mo ago· 1 in thread

> So having all devices on public addresses was stupid to begin with on IPv4 and it was arrogantly stupid on IPv6.

"Yeah? Well, you know, that's just like uh, your opinion, man." — The Dude

Publicly addressable ≠ publicly reachable.

When I was with my last ISP which had IPv6, my printer had a public address, but the only people who could reach it were those on my home network.

general1465OP2mo ago

With this logic, my printer can be reachable on google.com, but only from my private network, does not turn my printer into Google.

j / k navigate · click thread line to collapse

0 comments

6 comments · 2 top-level

orangeboats2mo ago· 3 in thread

The fact that we are giving IP addresses an hierarchy is stupid. If you don't want outsiders to connect to your device use a firewall.

general1465OP2mo ago

Or use NAT, which is actually better solution, because misconfigured NAT won't expose your whole network, while misconfigured firewall will.

Dagger22mo ago

Well, actually it will. In fact, even correctly configured NAT won't stop connections into your network.

On top of that, it lulls you into a false sense of security, so you confidently think it's protecting you even when it isn't. At least not having NAT makes the actual state of your network clearer.

general1465OP2mo ago

> even correctly configured NAT won't stop connections into your network.

Yeah that's called port forwarding. It is like complaining that light is coming into your house through windows. Fully intentional.

1 more reply

throw0101d2mo ago· 1 in thread

> So having all devices on public addresses was stupid to begin with on IPv4 and it was arrogantly stupid on IPv6.

"Yeah? Well, you know, that's just like uh, your opinion, man." — The Dude

Publicly addressable ≠ publicly reachable.

When I was with my last ISP which had IPv6, my printer had a public address, but the only people who could reach it were those on my home network.

general1465OP2mo ago

With this logic, my printer can be reachable on google.com, but only from my private network, does not turn my printer into Google.

j / k navigate · click thread line to collapse