Privacy extension for unique local networks?

[Hadmut Danisch <hadmut@danisch.de>]

Hi,

I have a particular problem with my IPv6 home network:

I need to enable auto configuration since my Router has dynamic IPv4
addresses and uses 6to4 tunneling, thus the IPv6 prefix also changes and
is announced by the Router (2002:...). Works.

Since several programs (including e.g. Samba) refuse to use the link
local addresses (FE80:..), and I do not want to open my server ports
just for any 2002:... address, I let my router announce an additional
unique address (FD00:...). Works as well.

I enabled the privacy extension on the interfaces because I want to
avoid beeing tracked by Webservers in the Internet, since the
2002:-Adresses are derived from the MAC address. Works also.


The problem: The Linux kernel's privacy mechanism assigns dynamic
changing to the FD00: address range also, which does not make sense and
makes my machines to use changing local addresses. Makes it difficult to
assign local permissions based on IP addresses.


The privacy mechanism should be restricted to public addresses (or at
least there should be a separate switch to turn it on and off for unique
local addresses).



regards
Hadmut

(Please reply directly, I am not on your mailing list)