ietf
[Top] [All Lists]

RE: NATs as firewalls

2007-03-08 04:04:53
IPv6 is not inevitable, the issue is how to make it so. 

Yes, and I believe that the way to make it so is to define the standard
for connecting to the IPv6 Internet. That standard should NOT be to
connect a computer via dialup modem or to connect a computer via its USB
port. Instead, it should be to install an IPv6 Internet gateway with a
standard set of gateway functions, and then connect the computer to
that. Some gateways may indeed use dialup to get to the Internet. Some
gateways may indeed allow computers to attach via USB. But the gateway
is an essential intermediary.

I'm not concerned with technical experts who know how to install and
IPv6 stack on their Windows NT laptop with built-in modem and dial
directly to the IPv6 Internet. Those people are small in number and
likely to be able to deal with the technical issues.

This SOHO gateway standard is aimed at making it easy for non-technical
consumers to connect to the IPv6 Internet without understanding how it
all works. A gateway must provide a smorgasbord of features for managing
the connection such as an in-out firewall. It must be manageable in a
secure way by the ISP providing IPv6 connectivity so that people with
technical knowledge can keep it running in good order without requiring
the consumer to unplug it and take it in for service. The overall goal
is to specify a smorgasbord of features that can be used to defend
against and mitigate most of the effect of known Internet abuse vectors.
This may end up being nothin more than a list of existing firewall
features, but in the process of discussion, there is the possibility of
coming up with something better.

--Michael Dillon


_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf

<Prev in Thread] Current Thread [Next in Thread>