<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">My “workaround” for this is to drop all IPv6 ingress on my router for any devices MAC I don’t want getting an IPv6 address. That way it can’t get an address from the likes of IPv6 stateless address auto configuration.<div><br></div><div>Haven’t tested enough to know what other implications this may cause.<br><div dir="ltr"><br><blockquote type="cite">On 15 Oct 2019, at 4:25 pm, Mark Smith <markzzzsmith@gmail.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="auto"><div><br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 15 Oct 2019, 17:13 Tomas Gibbs, <<a href="mailto:tomas.gibbs31@gmail.com" rel="noreferrer noreferrer" target="_blank">tomas.gibbs31@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div>
<div dir="auto" style="direction:ltr;margin:0;padding:0;font-family:sans-serif;font-size:11pt;color:black">
IIRC should be just fine to give it a public address aslong as you have firewalls in front to block traffic from outside to in.
<br></div></div></div></blockquote></div></div><div dir="auto"><br></div><div dir="auto">Why give a device a public address if it doesn't need it to do its job?</div><div dir="auto"><br></div><div dir="auto">You don't need a network firewall to protect a device from the Internet that can't ever be reached from the Internet.</div><div dir="auto"><div dir="auto"><br></div></div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="auto" style="direction:ltr;margin:0;padding:0;font-family:sans-serif;font-size:11pt;color:black">
<br>
</div>
<div dir="auto" style="direction:ltr;margin:0;padding:0;font-family:sans-serif;font-size:11pt;color:black">
<span id="m_-1169020649182346493m_-1421985821076265128m_-2997749998854419174x_OutlookSignature">
<div dir="auto" style="direction:ltr;margin:0;padding:0;font-family:sans-serif;font-size:11pt;color:black">
Get <a href="https://aka.ms/ghei36" rel="noreferrer noreferrer noreferrer" target="_blank">Outlook for Android</a></div>
</span><br>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_-1169020649182346493m_-1421985821076265128m_-2997749998854419174x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> AusNOG <<a href="mailto:ausnog-bounces@lists.ausnog.net" rel="noreferrer noreferrer noreferrer" target="_blank">ausnog-bounces@lists.ausnog.net</a>> on behalf of Mark Smith <<a href="mailto:markzzzsmith@gmail.com" rel="noreferrer noreferrer noreferrer" target="_blank">markzzzsmith@gmail.com</a>><br>
<b>Sent:</b> Tuesday, October 15, 2019 2:33:34 PM<br>
<b>To:</b> <<a href="mailto:ausnog@lists.ausnog.net" rel="noreferrer noreferrer noreferrer" target="_blank">ausnog@lists.ausnog.net</a>> <<a href="mailto:ausnog@lists.ausnog.net" rel="noreferrer noreferrer noreferrer" target="_blank">ausnog@lists.ausnog.net</a>><br>
<b>Subject:</b> [AusNOG] Default IPv6 Local Only Addressing for Non-Internet Devices</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:11pt">
<div>Hi,<br>
<br>
Quite closely related to my recent AusNOG "Getting IPv6 Private<br>
Addressing Right" presentation.<br>
<br>
I recently bought an IPv6 enabled Wifi printer. As it is attached to<br>
my single Wifi SSID it is configuring itself with IPv6 global<br>
addresses, even though I don't need it to be reachable from the<br>
Internet or able to reach the Internet. (It would be relatively hard<br>
to find from the Internet anyway with /64 prefix, and there is an IPv6<br>
firewall in front if it).<br>
<br>
I think it would be better for these types of "Non-Internet' devices<br>
not to configure themselves with global IPv6 addresses by default.<br>
<br>
"Default IPv6 Local Only Addressing for Non-Internet Devices"<br>
<a href="https://datatracker.ietf.org/doc/draft-smith-v6ops-local-only-addressing/" rel="noreferrer noreferrer noreferrer" target="_blank">https://datatracker.ietf.org/doc/draft-smith-v6ops-local-only-addressing/</a><br>
<br>
Regards,<br>
Mark.<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" rel="noreferrer noreferrer noreferrer" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer noreferrer noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div>
</span></font>
</div>
</blockquote></div></div></div>
<span>_______________________________________________</span><br><span>AusNOG mailing list</span><br><span>AusNOG@lists.ausnog.net</span><br><span>http://lists.ausnog.net/mailman/listinfo/ausnog</span><br></div></blockquote></div></body></html>