nanog mailing list archives

Re: Important IPv6 Policy Issue -- Your Input Requested


From: Randy Bush <randy () psg com>
Date: Tue, 9 Nov 2004 12:27:57 -0800


"Get a firewall" is not a valid response when you have lusers
to drop the latest netgear whatever onto their PC and dial
to some provider somewhere.  Your firewall is useless to 
protect that segment.  In many cases NAT is the ONLY
protection you end up with in this scenario, a scenario that
is far to common in the corporate world.

and do explain how a user coming in with their laptop and
dialing a provider is gonna be affected by your nat

randy


Current thread: