[153810] in North American Network Operators' Group
Re: IPv6 /64 links (was Re: ipv6 book recommendations?)
daemon@ATHENA.MIT.EDU (valdis.kletnieks@vt.edu)
Wed Jun 13 12:15:55 2012
To: Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>
In-Reply-To: Your message of "Wed, 13 Jun 2012 14:47:35 +0900."
<4FD82977.20904@necom830.hpcl.titech.ac.jp>
From: valdis.kletnieks@vt.edu
Date: Wed, 13 Jun 2012 12:14:30 -0400
Cc: nanog@nanog.org, davehart_gmail_exchange_tee@davehart.net
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1339604070_2111P
Content-Type: text/plain; charset=us-ascii
On Wed, 13 Jun 2012 14:47:35 +0900, Masataka Ohta said:
> Dave Hart wrote:
> > is inadequate for carrier NAT due to its model assuming the NAT trusts
> > its clients.
>
> UPnP gateway configured with purely static port mapping needs
> no security.
>
> Assuming shared global address of 131.112.32.132, TCP/UDP port
> 100 to 199 may be forwarded to port 100 to 199 of 192.168.1.1,
> port 200 to 299 be forwarded to port 200 to 299 of 192.168.1.2,
And you tell the rest of the world that customer A's SMTP port is on
125, and B's is on 225, and Z's is up at 2097, how?
(HInt - we haven't solved that problem for NAT yet, it's one of the big
reasons that NAT breaks stuff)
(Totally overlooking the debugging issues that arise when a customer tries
to run a combination of applications that in aggregate have 101 ports open..)
--==_Exmh_1339604070_2111P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iQIVAwUBT9i8ZgdmEQWDXROgAQLI5RAAlxl/RcFAeaRTsR5QTa4rGUF5mw/5YD/6
FV0ecu6qv/7wyo35QF7W3d0EEnYt71QH9BP0z9MyrzJ+uMFORAaqns1O5q+vxitP
lXzyOcyKJI+txtSSHl9qa85XfhyQBpzgGIEr/lCkJ9SlL8AH6x/55foU+/E4qtoy
R+M+Fs3CyGUoUSrwoTxhflU/Y5Kukw2hdBGLJqTRfkxy0P/SF7p3cGzMjzYuaRQr
Ied/bqP9LUryMwRD+22RjZvdWRvsBDWIctr7QOfjfvSP+LDQoPu8175dxjL/hK9F
PV/fEfRgo9bs+lhgsWHta0Yf1TIV7H5/psRLfTEfGN1aHpn2JIPJz9pp7+NVW/cj
27C41ZIIAXl9BBEC+jUaXq/XfZ+8+f5So1T2v2PRmjxJhZtvEL1VU2Dn/4xbXpw0
ZqteoOiMYQv6rkYcmnSpRdvndMyMSUwhb6S5V0SZ6ZfswQRa8nGYcC7RS0delSze
WyI3Fg3zgmArqq1YhsoWL0q1wSjNkHDGfPs8pK8QyKmfoJHLk1GktbH1dJSW80XO
mrzy7QPUQK42MIR7G7VIZkRl9KndZpIz6l6Skrz+XSMfnWASpVAfLcD4VaQusmK7
I34w27K2WOOJOLhNsAUM7QkI180zxOML0WJzgwGE0BLBnkrpgZ/vWm5SfUKAVKB+
//SE6uWWVOs=
=zZeD
-----END PGP SIGNATURE-----
--==_Exmh_1339604070_2111P--
