IPV6 Firewall with dynamic prefix

[omrij]

Sorry, I don't use docker compose
The subnet in network bridge in docker updates every time the prefix change.

 

[sfx2000]

P.S. I was hoping that an IPv6 Guru would chime in to say beware!....a minor security issue with it as-is, is that it opens up all inbound subnets, so if you have say a /56 from your provider then you should really restrict it to just the relevant one of your /64 subnets.

Beware - there's a minor security issue as it opens up all inbound subnets...

There, done

 

[unsynaps]

Sorry, I don't use docker compose
The subnet in network bridge in docker updates every time the prefix change.