[OpenWrt-Devel] FULL CONE NAT in OpenWrt

[Fernando Frediani]

I believe NAT66 should not be stimulated in any sense.
One of the greatest things of IPv6 is to restore end to end communication.

PDs should only change when there is a re-connection and the CPE should 
be able able to handle that correctly updating its LAN prefixes accordingly.
Stimulating and making that easy for general usage is like a crime 
against IPv6. If one really needs to use that "chewing gun" he must know 
what he is doing and to manually for that exception case.

Regards
Fernando

On 04/05/2020 17:52, Joel Wirāmu Pauling wrote:
> I am all for exposing Cone Nat in UCI / Firewall zones as an option to 
> the masquerading configuration in a zone.
>
> Also as much as I hate it nat66 for IPv6 needs to be exposed in the 
> same place - specifically for mapping routable PD which change often 
> to ULA's.
>
> -Joel
>
> On Tue, 5 May 2020 at 07:25, Gracias Amigou <puchapapa01 at gmail.com 
> <mailto:puchapapa01 at gmail.com>> wrote:
>
>     Please add this package as official:
>
>     *Posts:*
>
>      1. xt_FULLCONENAT -- Implementing RFC 3489 full cone SNAT in
>         OpenWrt
>         <https://forum.openwrt.org/t/xt-fullconenat-implementing-rfc-3489-full-cone-snat-in-openwrt/14816>
>      2. [12/8更新]OpenWrt 上实现 NAT1 (Full cone NAT) 的方法，无需
>         DMZ/UPnP - OPENWRT专版
>         <https://www.right.com.cn/forum/thread-319827-1-1.html>
>      3. 从DNAT到netfilter内核子系统，浅谈Linux的Full Cone NAT实现 |
>         ChionLab
>         <https://blog.chionlab.moe/2018/02/09/full-cone-nat-with-linux/>
>
>     *
>     *
>     *Git:*
>     • GitHub - LGA1150/openwrt-fullconenat: Netfilter and iptables
>     extension for full cone NAT ported to OpenWrt.
>     <https://github.com/LGA1150/openwrt-fullconenat>
>     _______________________________________________
>     openwrt-devel mailing list
>     openwrt-devel at lists.openwrt.org
>     <mailto:openwrt-devel at lists.openwrt.org>
>     https://lists.openwrt.org/mailman/listinfo/openwrt-devel
>
>
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20200504/90f40942/attachment.htm>
-------------- next part --------------
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel