[134400] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: NIST IPv6 document

daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed Jan 5 17:46:59 2011

From: "Dobbins, Roland" <rdobbins@arbor.net>
To: Nanog Operators' Group <nanog@nanog.org>
Date: Wed, 5 Jan 2011 22:45:59 +0000
In-Reply-To: <AANLkTimUm9GO0sDGJtwwKPRpiM3ezm4M=bRyheD6HmC4@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Jan 6, 2011, at 1:14 AM, Jeff Wheeler wrote:

> A stateful firewall on every router interface has been suggested already =
on this thread.  It is unrealistic.

It isn't just unrealistic, it's highly undesirable, since it represents an =
huge DoS state vector.

------------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>

Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.

			  -- Alan Kay



home help back first fref pref prev next nref lref last post