undefined | Better HN

0 pointsDenvercoder95y ago0 comments

Any firewall worth its salt can do this with IPv6 as well. There's nothing on a technical level preventing it.

0 comments

iptables?

Of course it's technically possible, it's all just packets of data that you can change, at the end of the day. I just meant that the easy way to do it (AIUI) went away with IPv6 because you were never supposed to need to do that, and with v6 you 'don't'.

It's not like the purpose of firewalls is redirection.

Reelin5y ago

I thought that iptables was the easy way to do it? (Both for IPv4 and IPv6.)

NAT66 is an experimental (10 years old IIUC!) RFC for one-to-one IPv6 mapping. While there's no RFC specifying an official method of masquerading behind a single address, AFAIK iptables "just works" (as long as you aren't running FreeBSD).

X-Istence5y ago

Create a loopback interface and assign it the IP address you want redirected, then have your DNS resolver bind to those IP's.

j / k navigate · click thread line to collapse