"NY" writes:
> The whole concept of IPv6 fills me with horror. The idea that all LAN
> devices have public IP addresses, and that all devices must have a
> good firewall, instead of using the NAT and the firewall in the
> router, seems a *huge* retrograde step in terms of security.
You can perfectly well have an IPv6 firewall in your router, not
conceptually different from the IPv4 firewall we expect to see today.
NAT is not a security measure. People presumably assume it is because it
is typically codeployed with an IPv4 firewall, but it’s the firewall
that is protecting your network, not the NAT.
--
https://www.greenend.org.uk/rjk/
--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | FidoUsenet Gateway (3:770/3)
|