HN user

_bernd

53 karma
Posts1
Comments52
View on HN
Sonobe 2 days ago

Yeah a classic and indeed a beautiful one. I highly recommend to learn the module and craft the low count piece bodies. And if you need to meditate and build resilience try to build the huge shape :-)

Personally I dislike this term since ages.

Yes, in the end it just describes a "zone" and back in the old days most if not all small scale deployments just had wan, lan, and a server network.

But what actually matters are rules between the zones. And again back in the days most firewall rules where simply, disallow wan to lan, but trust all lan to "dmz"/server. And between server and lan? Good luck -.-

Tldr old farts rant: please just all it all a "firewall". Be it zone based or otherwise organized....

If they would have live as shitty as your train of thoughts then yes we as a species would have not survived.

Please have a look at how indigenous tribes live and cure the sick to get a feeling what it would have might be back 50k+ years.

What I got during Museum visits and talking with people working in academics those people had a pretty good living. Well feed and even major injuries were treated well.

So please come on.

so they are much more intelligent than I think they were

Pardon me, but we are talking about homo sapiens here? Those people would be not different then you and me. If you would raise one of their child's today it would just blend in. They were/are the same species then you and me... I just want to say please don't ride that all cavemen were stupid apes train. That boot sailed a long time ago regarding to modern science.

Think of that you want to Provision a "smart device" with just a computer and no router.

These link local addresses are quiet handy. But sadly the parsing of these with modern browsers is a flame war ever since. I assume that's the reason why we don't see its usage that often.

Another nice use case is to use these link local addresses in cloud environments...

I certainly don't think of IRC when I think of Internet radio.

Or you are certainly to young :) Voting songs and the like on shoutcast/icecast stations via irc was not only common for gamers if my memory serves me well from the earliest 2000ths

Pardon me but you could have in many cases have cached the data. I honor your strong commitment. I most often use digital because "it's easier" for them. But not for me. Sometimes I make fun and use printouts of their digital system just for the lulz. But back to cached data. Most often the mobil application catches data upfront and still be valid later even offline. Just as a reminder. Peace.

Sorry Pale but I doubt you are either James Bond or Edward Snowden. Chill out. I once visit Japan, and you get papers with full of information and maps where stuff line out the direction for you ALL the time... You see there are alternatives and in this special use case you even gain privacy by blending in with all the other crowd.

You only need to set nothing and it should setup ipv6 on all downstream vlan interfaces. For static prefix I'd you can set ip6hint per vlan interface. For each vlan interface you need a stanza in the DHCP config file. And regarding firewall, as with the default lan zone you might need to add new zones with the vlan interfaces and configure forwarding rules. That's it.

That's why server use a static suffix and do slaac to get their prefix. It's really as simple as that.

Regarding firewall policies:

just because most network OS are plain dumb, does not implies that's the fault of IPv6.

A zone based firewall solves that already. And for instance OpenWrt fw4 can make rules for suffixes in a zone too.