In reply to a post by jchamier:

DDNS works great for incoming, but not so good for connecting outbound.

Keeping an IP address static for the purposes of home-working via a corporate firewall is generally outside the scope of what is within the T&C of home broadband providers.

This is true.

However, if making a living in programming or any serious IT support working from home, the extra cost of a decently set up connection by taking a business one with BT or ANO would seem to be wiser than penny-pinching.

In reply to a post by Oliver341:

In reply to a post by jchamier:

DDNS works great for incoming, but not so good for connecting outbound.

Keeping an IP address static for the purposes of home-working via a corporate firewall is generally outside the scope of what is within the T&C of home broadband providers.

Why do you say that? Surely if an ISP offers static IP (and of course many do not) then there is no difference in the connection to a dynamic IP. Other than it remains the same. (It is of course EASIER for the ISP, once they realise this, for an always on internet connection. That was BE's logic).

I have a Plusnet static IP because of my hobbies, and connecting through firewalls that I configure for my hobbies. No money involved, and this is nothing to do with my employer. Does that break T&C ?

In reply to a post by RobertoS:

However, if making a living in programming or any serious IT support working from home, the extra cost of a decently set up connection by taking a business one with BT or ANO would seem to be wiser than penny-pinching.

Depends if you're self employed, and hence (might) make a lot of money, or you're an employee of a very large multinational IT company that pays below market rates. (most of them).

I don't agree there is any guaranteed link between static IP and working at home for a large company. It could be a reason, but it is not the only reason. Some ISP's are wrong in this respect. By its nature, IPv6 will not be dynamic, and eventually the whole stupid idea of paying for a Static IP goes away.

People seem to think a dynamic IP is a security feature. Er.... they're wrong.

Edited by jchamier (Sat 14-Sep-19 16:59:34)

I was talking about Paul's setup in particular, where it would seem the extra cash for a business connection looks to me to be not of huge significance compared to the overall cost.

In reply to a post by jchamier:

By its nature, IPv6 will not be dynamic

Not correct, the IPv6 prefixes handed out by BT and Sky are not static.

In reply to a post by jchamier:

I have a Plusnet static IP because of my hobbies, and connecting through firewalls that I configure for my hobbies. No money involved, and this is nothing to do with my employer. Does that break T&C ?

No. But the main reason for people wanting a static IP address will most likely be when they work from home and their employer wishes to put one, and only one, hole in their firewall for them.

Home applications such as remote monitoring webcams, or even hosting a local web/mail server are easily handled by DDNS.

I can see why ISPs do this as a form of "soft" discouragement from using home broadband for commercial purposes, even though in reality this is rarely if ever enforced within the T&C.

In reply to a post by Oliver341:

the main reason for people wanting a static IP address will most likely be when they work from home and their employer wishes to put one, and only one, hole in their firewall for them.

Interesting, these employers I would think are likely to be small companies as most of the multinationals I know provide RSA tokens either physical or app based (e.g. blackberry/Android) and have done so for the last 20 years.

Edit: You also can't take a static IP address on the road, so no good on the train or at a hotel.

Edited by deleted (Sat 14-Sep-19 17:34:23)

In reply to a post by dect:

Interesting, these employers I would think are likely to be small companies as most of the multinationals I know provide RSA tokens either physical or app based (e.g. blackberry/Android) and have done so for the last 20 years.

Do both for maximum security. Opening a server to the entire internet when it only needs to serve specific clients is an unnecessary risk.

In reply to a post by Oliver341:

Opening a server to the entire internet when it only needs to serve specific clients is an unnecessary risk.

Opening any hole in a firewall is a calculated risk. Using a properly configured VPN provides authentication, authorisation and ongoing data authenticity. Vastly superior to a hole in a firewall to a Static IP - that could be spoofed.

The idea a static IP is a security feature is madness.