Privacy extension for unique local networks?
From: Hadmut Danisch <hidden>
Date: 2011-12-12 13:31:33
Hi, I have a particular problem with my IPv6 home network: I need to enable auto configuration since my Router has dynamic IPv4 addresses and uses 6to4 tunneling, thus the IPv6 prefix also changes and is announced by the Router (2002:...). Works. Since several programs (including e.g. Samba) refuse to use the link local addresses (FE80:..), and I do not want to open my server ports just for any 2002:... address, I let my router announce an additional unique address (FD00:...). Works as well. I enabled the privacy extension on the interfaces because I want to avoid beeing tracked by Webservers in the Internet, since the 2002:-Adresses are derived from the MAC address. Works also. The problem: The Linux kernel's privacy mechanism assigns dynamic changing to the FD00: address range also, which does not make sense and makes my machines to use changing local addresses. Makes it difficult to assign local permissions based on IP addresses. The privacy mechanism should be restricted to public addresses (or at least there should be a separate switch to turn it on and off for unique local addresses). regards Hadmut (Please reply directly, I am not on your mailing list)