[136401] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: quietly....

daemon@ATHENA.MIT.EDU (Mark Andrews)
Wed Feb 2 19:27:23 2011

To: John Payne <john@sackheads.org>
From: Mark Andrews <marka@isc.org>
In-reply-to: Your message of "Wed, 02 Feb 2011 15:13:21 CDT."
	<3CD3A697-8D3C-4EDE-8E4E-53C0E103E12C@sackheads.org>
Date: Thu, 03 Feb 2011 11:25:59 +1100
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


In message <3CD3A697-8D3C-4EDE-8E4E-53C0E103E12C@sackheads.org>, John Payne writes:
> 
> On Feb 2, 2011, at 2:54 PM, Owen DeLong wrote:
> 
> >=20
> > On Feb 2, 2011, at 11:40 AM, John Payne wrote:
> >=20
> >>=20
> >> On Feb 2, 2011, at 6:18 AM, Owen DeLong wrote:
> >>=20
> >>> NAT66 is different. NAT66 breaks things in ways that impact sites =
> outside of the site choosing to deploy NAT.
> >>=20
> >> Examples?
> >=20
> > SIP
> > Network enabled Video Games
> > Peer to Peer services of various forms
> > etc.
> 
> I chose NAT66.  How does that affect you or any other site?
> 
> Note that I have already blocked games and peer to peer either =
> technically or via policy.... and I have no SIP end points that have any =
> business talking outside the enterprise.

Today you don't.  Tomorrow you might.
 
> Just rephrasing you slightly.  NAT66 will break applications that many =
> enterprises will already have blocked at their perimeters.

And it makes applications they do use (current and future) more
complicated as they have to deal with all the issues that arise
from using a NAT'd address.

Mark

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org


home help back first fref pref prev next nref lref last post