Brett Parker wrote:
On 03 Feb 11:22, Mark Rogers wrote:
On 03/02/10 10:59, Wayne Stallwood wrote:
Well "more addresses" is so many more we can ditch NAT which was a horrible hack in the first place.
NAT is a horrible hack, but does have significant benefits; imagine having an office full of internet-addressable Windows PCs! It may or may not be trivial to configure a firewall (and maybe IPv6 has something to offer here? I know very little about IPv6 as yet) but with IPv4 and NAT it's difficult to give multiple PCs in one office unrestricted bi-direction internet access, and the world would probably we a worse place were that not true!
Meh - drop in a stateful firewall on the router, done. Make it so that ipv6 outbound can go anywheres and inbound is only on things that it knows about - usual firewall/routing practice. NAT has made most people lazy about what their firewall should be doing.
What he said.
I think probably that would end up being the default configuration for any consumer grade router/gateway appliance much as it is now. You'd get people clicking the "allow everything, everywhere" button to try and get something working and mostly they will get exactly what they deserve :)
Once every script kiddy on the planet has emptied the trays on their network printer overnight a few times they will get the point.
At home I have a Virgin cable connection, but at work we are an Enta reseller and I recall reading in the previous thread that this might be a Good Thing as far as IPv6 is concerned?
Yes you just need to contact ipv6@enta.net to get it enabled for a new or existing connection and as Brett says, make sure you have ipv6 friendly equipment at your end.