And how exactly is your NATed ipv4 address better? This seems backwards.

Router has a DynDNS function. I am using a reverse proxy for multiple services, but this only sets up router IP and IPv4 NAT port forwarding to the reverse proxy.

So what would be the correct setup with IPv6 when using privacy extensions?

I don't see any benefit in allowing IPv6 traffic or using IPv6, but a couple of new problems coming up with it.

▲

Dagger2 2 hours ago | parent | next [-]

Privacy extensions are additional addresses that are used by default for outbound connections. You still have the non-privacy address, which doesn't change; put that one into DNS.

This approach prevents outbound connections from leaking the address needed to connect to your servers. On v4, it's likely that any outbound connection from your network gives the server the IP they need to do that.

	▲	menotyou an hour ago \| parent [-]
		My ISP changes the prefix on a regular base (and on request)

▲

icedchai 2 hours ago | parent | prev [-]

How often does your IPv4 address actually change?

	▲	menotyou an hour ago \| parent [-]
		Never checked. But it does change once in a while. The router has a dyndns function which updates a DNS entry, but only for the router itself. But this is sufficient for the NAT port forwarding.