Add IPv6 Privacy settings

catfish99 · Aug 10, 2012, 11:14 PM

IPv6 Privacy addresses are not enabled by default.

Settings seem to be missing. Suggest they be added and default be set to - on - as per the blog post @ http://ipv6int.net/systems/freebsd-ipv6.html

Privacy Extensions
Activate Generation - net.inet6.ip6.use_tempaddr=1
Prefer privacy addresses and use them over the normal addresses - net.inet6.ip6.prefer_tempaddr=1

NOTE - Also added to bugtracker.. http://redmine.pfsense.org/issues/2587

jimp · Aug 11, 2012, 4:17 PM

Might be nice to have a toggle, but as that's a run-time tunable you can set that under System > Advanced on the tunables tab, too.

catfish99 · Aug 11, 2012, 5:49 PM

Personally, i'm just keen the settings be available somewhere. Tunables tab is fine.

I had to manually add the entries for IPV6 privacy to the System > Advanced tunables tab. Might i suggest they be added to the default list of tunable items in 2.1.

thanks!

@jimp:

Might be nice to have a toggle, but as that's a run-time tunable you can set that under System > Advanced on the tunables tab, too.

databeestje · Aug 20, 2012, 4:20 PM

I'm sorry but enabling privacy extensions on a router does not make any sense. You will want to enable these on your clients.