[125663] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Rate of growth on IPv6 not fast enough?

daemon@ATHENA.MIT.EDU (Mikael Abrahamsson)
Tue Apr 20 20:58:59 2010

Date: Wed, 21 Apr 2010 02:58:21 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Chris Adams <cmadams@hiwaay.net>
In-Reply-To: <20100421004626.GC1156773@hiwaay.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Tue, 20 Apr 2010, Chris Adams wrote:

> than PCs all the time, such as network printers (which have a very 
> spotty security record, especially on the cheap end) and disk servers. 
> Network devices like that _can't_ just block all access.

Windows XP SP2 and later has the concept of different "zones" (or whatever 
it's called) where it'll allow things from the local subnet but not from 
outside of it, if you tell it so. I know people who configure their 
network printers without default gw to handle their spotty security.

I do think the home router should have a stateful firewall and according 
to what I see in the IETF, this is going to be the recommendation for an 
IPv6 enabled home gateway.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se


home help back first fref pref prev next nref lref last post