Hi Lee, 

> If the addresses are auto-discovered, how are you supposed to be able to 
> configure filtering rules for what you want to let through?

very simply. 

1. Each interface on an IPv6 enabled machine has several addresses. One of them 
is the autoconfigured address, one is the (a) Privacy Extension address, and 
then you can still configure addresses manually. Obviously the latter method is 
the right choice for servers.

2. Except for the Privacy Extension address(es), auto-configured addresses are 
static (although virtually unmemorisable) as long as the prefix and the host's 
MAC address are. So there is a static address that you can put into your DNS 
and configure on your firewall. 

Best regards, 

  Peter.
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Reply via email to