The question above for the most part, been reading up on it. Also want to it for learning purposes.

    • orangeboats@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 year ago

      Port forwarding is exclusively a NAT phenomenon.

      In IPv6 every device should in theory have a public address - just like how every computer had a public IPv4 address back in the 1980s ~ 1990s.

      However, most sensible routers will have a firewall setup by default that blocks all incoming connections for security reasons. You still need to add firewall rules.

      • fedev@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        This is correct. My router however doesn’t have that level of firewall. It’s either all allowed or nothing is.

      • MeanEYE@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        There’s no “should in theory”. It’s only a possibility due to sheer number of possible combinations. No one was ever going to make every device public. It makes absolutely no sense. Why would your company’s printer be online or isolated networks or VPNs? There’s no point.

        • orangeboats@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          IP addressing is just a way to give a globally unique number to each device. It’s just a number.

          And there wasn’t a real public/private distinction when the Internet was still in its infancy. Printers were indeed given “public” addresses because people needed a number for it.

          If you don’t want your printer to be reachable by the public Internet, use a firewall to block outside connections. If you can use NAT, you certainly can use a firewall. Heck, they are almost the same thing if you have been using the Linux kernel (iptables/nftables handle firewalling and masquerading with the same tool!)

          Routability is not the same as reachability. With NAT transversal you can reach my “private” hosts all the same, although you can’t route to me because I don’t have a public address.