Re: [pntaw] New version of draft-hutton-rtcweb-nat-firewall-considerations

[Melinda Shore <[e-mail]>]

On 9/22/13 10:41 PM, Oleg Moskalenko wrote:
> Melinda, you are assuming that the policies are a precise accurate
> instrument that can be used to set the exact network access rules.
> 
> They are not. The reality is that the modern state of network policies
> is rather behind the real-world requirements.

My comfort level with telling people who run networks
that their network access management policies and technologies
are behind the times and because we know better then they
do about these things it's fine if we punch holes in their
firewalls without asking is not very high, to be honest.

At any rate I do think it's worth understanding (yes, I
used the "u" word) that you're using technologies that were
intended to address NAT problems for firewall traversal
and that there are some security issues that need closer
scrutiny, particularly the specifics of how you protect
against abuse by attackers.

Melinda