@phnt @bonifartius @slashb

> which is almost always because UPnP exists and somehow is always enabled by default

UPnP isn't even the worst of it. I arrived here and the router here had port 80 open to the world and "admin"/"admin" as the credentials. The ISP set this terrible goddamn router up: they're also the *only* ISP that serves this area.

> No this is a feature.

Well, a feature of the existence of private address spaces, right; NAT was developed to map private IP spaces onto public ones, and then they built the cone and this, because it took address allocations away from the Central Committee and just gave you a class-A to do whatever with, was anathema to the Central Committee.

> This knocking is already a common thing in botnet router exploitation.

This is imporant shit that will end up completely ignored by everyone that is engaged in motivated reasoning around IPv6.

> Yes, and only Windows uses that. It's called APIPA.

dhcpcd will try to give you one if you don't get a DHCP response and you don't give it -L.