Re: [v6ops] RFC7217 and flash renumbering and IID change

Simon Hobson <linux@thehobsons.co.uk> Sun, 13 December 2020 19:53 UTC

Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Simon Hobson <linux@thehobsons.co.uk>
In-Reply-To: <28ec97ca-355b-e4d8-200d-1c14160b51c0@si6networks.com>
Date: Sun, 13 Dec 2020 19:53:01 +0000
Content-Transfer-Encoding: quoted-printable
Message-Id: <4AC2A13C-9FE6-4D2C-B14C-D1DCC3169700@thehobsons.co.uk>
References: <alpine.DEB.2.20.2012111147020.10335@uplift.swm.pp.se> <28ec97ca-355b-e4d8-200d-1c14160b51c0@si6networks.com>
To: IPv6 Operations <v6ops@ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/S-KUSDtpIe4ncZEq1JwQcPHB4Bk>
Subject: Re: [v6ops] RFC7217 and flash renumbering and IID change
Precedence: list

Fernando Gont <fgont@si6networks.com> wrote:

> So it should be the host talking to the firewall and telling what to do with which address.  -- with e.g. something like UPnP.

So we're back to each host deciding on the security policy for the network - not a network admin (as a proxy for the owners of the site/network).

I make a point of disabling upnp as one of the first steps when setting up a network. Who wants ${random device which may or may not be "friendly"} to be able to determine what traffic is allowed into the network - it's not like there is anyone out there in the wild west of the internet who'd have any hostile intent :-/

Simon

[v6ops] RFC7217 and flash renumbering and IID cha… Mikael Abrahamsson
Re: [v6ops] RFC7217 and flash renumbering and IID… Fernando Gont
Re: [v6ops] RFC7217 and flash renumbering and IID… Ted Lemon
Re: [v6ops] RFC7217 and flash renumbering and IID… Simon Hobson
Re: [v6ops] RFC7217 and flash renumbering and IID… Fernando Gont