I'm deploying IPv6 for my employer. While getting corporate servers up on IPv6 is nice and all, of course I put priority on my own personal Web server.
Just because IPv6 is still populated mostly by early adopters, doesn't mean we can neglect basic system security. That means that the server needs a packet filter for both IPv4 and IPv6. PF supports filtering both protocols in one ruleset.
The following is a unified IPv4/IPv6 PF ruleset for a small server. It:
Allows all traffic from management ...
Published on March 20, 2012 10:56