You can have IPv6 firewalls emulate the behavior of NAT so it blocks unsolicited...

throw0101c · 2026-04-01T21:51:56 1775080316

> You can have IPv6 firewalls emulate the behavior of NAT so it blocks unsolicited inbound traffic while allowing outbound traffic.

Are there any (consumer?) firewalls that do not do this? I know Asus do this (and have for years).

AIUI most 'enterprise' firewalls have a default deny shipped from the factory and you have to actively allow stuff.

iamnothere · 2026-04-01T16:38:09 1775061489

Right, but if you’re messing around as a naive learner it’s easy to accidentally disable that or completely open up an IP or range due to a bad rule. It’s a lot harder to accidentally enable port forwarding on a NAT.

degamad · 2026-04-01T17:16:29 1775063789

> It’s a lot harder to accidentally enable port forwarding on a NAT.

It's probably less than three clicks on most home router web UIs.

MisterTea · 2026-04-01T18:00:50 1775066450

But you have to specify not only the exposed port but also the destination address and port which is not easy to do accidentally.

edit: typo

iamnothere · 2026-04-01T17:43:03 1775065383

Very hard to make all those clicks accidentally. But anyway I’m talking about pf/iptables rules, not web UIs.