Re: [v6ops] Thoughts about wider operational input

[JORDI PALET MARTINEZ <[e-mail]>]

Because if you don't have NAT, you are forced to properly configure a firewall.

With a NAT, many don't even have a firewall or is not sufficiently well configured.

Regards,
Jordi
@jordipalet
 
 

El 30/3/22, 17:58, "v6ops en nombre de Joe Maimon" <[e-mail] en nombre de [e-mail]> escribió:



    JORDI PALET MARTINEZ wrote:
    >
    > To demonstrate how NAT is not security, you just need to enable Teredo 
    > or any other UDP tunneling traversing the NAT, so the security guys 
    > can see that without any special config in the NAT, you can dig a 
    > whole on it (Teredo Navalis = Shipworm).
    >
    > Regards,
    >
    > Jordi
    >
    > @jordipalet
    >

    And then you need to demonstrate how the equivalent would not happen on 
    IPv6.

    Joe

    _______________________________________________
    v6ops mailing list
    [e-mail]
    https://www.ietf.org/mailman/listinfo/v6ops



**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.