North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Important IPv6 Policy Issue -- Your Input Requested

  • From: James
  • Date: Tue Nov 09 15:25:54 2004 
On Wed, Nov 10, 2004 at 03:14:51AM -0500, Jerry Eyers wrote:
> "Get a firewall" is not a valid response when you have lusers
> to drop the latest netgear whatever onto their PC and dial
> to some provider somewhere.  Your firewall is useless to 
> protect that segment.  In many cases NAT is the ONLY
> protection you end up with in this scenario, a scenario that
> is far to common in the corporate world.
> 
> Jerry 

Then get a stateful firewall. NAT == stateful fw + header map/mod
done/done.

-J

-- 
James Jun                                            TowardEX Technologies, Inc.
Technical Lead                       IPv4 and Native IPv6 Colocation, Bandwidth,
[email protected]             and Web Hosting Services in the Metro Boston area
cell: 1(978)-394-2867           web: http://www.towardex.com , noc: www.twdx.net