Port forwarding is necessary due to NAT not firewalls.
It’s not that your router blocks new incoming connections at port X, it’s that it does not know which local client it’s meant for, since it’s addressed to the public IP that is held by your router.
With IP6 it’s lan client also gets assigned a public IP6 address (as there are plenty) and so the router receives a connection addressed to a Lan client and knows where to route it.
It’s not v6 itself, it’s rather lack of layers of nat that prevent forwarding a v4 for most folks.
Hmm, so no firewall in the router blocking ports, instead blocking happens on the actual client?
Port forwarding is necessary due to NAT not firewalls.
It’s not that your router blocks new incoming connections at port X, it’s that it does not know which local client it’s meant for, since it’s addressed to the public IP that is held by your router.
With IP6 it’s lan client also gets assigned a public IP6 address (as there are plenty) and so the router receives a connection addressed to a Lan client and knows where to route it.
Ah interesting! TIL. Thank you!
The router is still your firewall, it just doesn’t need to do NAT with IPv6
Normally firewall is on the router. Sensitive environments usually run one on the client as well.