[133208] in North American Network Operators' Group
Re: Pointer for documentation on actually delivering IPv6
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Mon Dec 6 11:23:33 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: North American Network Operators Group <nanog@nanog.org>
Date: Mon, 6 Dec 2010 16:23:20 +0000
In-Reply-To: <4CFD0605.20604@brightok.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Dec 6, 2010, at 10:49 PM, Jack Bates wrote:
> So does NAT add to security? Yes; just not very much.=20
It adds nothing which can't be added in another, better way, and it subtrac=
ts a great deal in terms of instantiating unnecessary DoSable stateful chok=
epoints in the network, not to mention breaking traceback.
NAT <> security. NAT is a net security negative.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Sell your computer and buy a guitar.
