From 514e36847801d202ce9df7068416a2003d3c9187 Mon Sep 17 00:00:00 2001 From: dawn Date: Wed, 2 Sep 2026 21:53:39 +0900 Subject: [PATCH] spindle/netguard: block the NAT64 local-use prefix Signed-off-by: dawn --- spindle/netguard/netguard.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/spindle/netguard/netguard.go b/spindle/netguard/netguard.go index 30a7721e..8e8d959c 100644 --- a/spindle/netguard/netguard.go +++ b/spindle/netguard/netguard.go @@ -31,7 +31,8 @@ var BlockedRoutes = []string{ "::/128", // unspecified address "::1/128", // loopback "::ffff:0:0/96", // ipv4-mapped addresses - "64:ff9b::/96", // ipv4/ipv6 translation prefix + "64:ff9b::/96", // well-known ipv4/ipv6 translation prefix + "64:ff9b:1::/48", // local-use ipv4/ipv6 translation prefix "100::/64", // discard-only prefix "2001::/23", // ietf protocol assignments "2001:db8::/32", // documentation / examples -- 2.51.2