[ALUG] IPv6 - why?

[Wayne Stallwood]

Brett Parker wrote:
> On 03 Feb 11:22, Mark Rogers wrote:
>   
>> On 03/02/10 10:59, Wayne Stallwood wrote:
>>     
>>> Well "more addresses" is so many more we can ditch NAT which was a  
>>> horrible hack in the first place.
>>>       
>> NAT is a horrible hack, but does have significant benefits; imagine  
>> having an office full of internet-addressable Windows PCs! It may or may  
>> not be trivial to configure a firewall (and maybe IPv6 has something to  
>> offer here? I know very little about IPv6 as yet) but with IPv4 and NAT  
>> it's difficult to give multiple PCs in one office unrestricted  
>> bi-direction internet access, and the world would probably we a worse  
>> place were that not true!
>>     
>
> Meh - drop in a stateful firewall on the router, done. Make it so that
> ipv6 outbound can go anywheres and inbound is only on things that it
> knows about - usual firewall/routing practice. NAT has made most people
> lazy about what their firewall should be doing.
>
>   
What he said.

I think probably that would end up being the default configuration for 
any consumer grade router/gateway appliance much as it is now. You'd get 
people clicking the "allow everything, everywhere" button to try and get 
something working and mostly they will get exactly what they deserve :)

Once every script kiddy on the planet has emptied the trays on their 
network printer overnight a few times they will get the point.

>   
>> At home I have a Virgin cable connection, but at work we are an Enta  
>> reseller and I recall reading in the previous thread that this might be  
>> a Good Thing as far as IPv6 is concerned?
>>     
>
>   
Yes you just need to contact ipv6 at enta.net to get it enabled for a new 
or existing connection and as Brett says, make sure you have ipv6 
friendly equipment at your end.