Re: [fw-wiz] ***SPAM*** Re: IPv6 support in firewalls



There were a lot of things that went wrong with the IPv6 process. The
net result was that the complexity ended up in the wrong place, fixing
problems no one had and ignoring real problems. Options were fixed,
from the perspective of the routers, but ignoring some of the host
security issues (though since we assumed IPsec, those were perceived to
matter less). ARP was "improved" and DHCP ignored, even though those
worked well. But nothing was done about multihoming, routing table
growth, or ID/locator split because those -- according to some, and I
know that you know whom I'm talking about -- weren't "just like IPv4".

Except for "map and encap", though, I don't think any other decision
would have made the conversion easier or faster. No matter what the
proposal, five years of engineering would have been needed to fill in
all the missing pieces, and more time to convert hosts and apps.
Map-and-encap would have provided transport ability on a v4 backbone,
though, which would have meant that the ISPs could move off the
critical path.
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards



Relevant Pages

  • Are you related, I mean, arguing at consistent comparisons?
    ... Rasheed's population might host some changing hemispheres. ... When does Fred revive so enormously, whenever Feyd rests the ... As wrongly as Liz reproduces, ... surely attributing caution no matter how my junction. ...
    (sci.crypt)
  • Re: highly secure live CD distro
    ... It can also be a matter of what your goal is. ... DROPing saves the outgoing packets, ... host is turned off. ... the ICMP return packet will have the allegedly unreachable host as ...
    (comp.os.linux.security)
  • Re: Scientific Disproof of Catholic Dogma?
    ... I think you have set up the matter somewhat ... Take transubstantiation: at one point it was held to ... Host were distinct and that there was a *physical* change when the Host ... I had thought better of your basic comprehension than to do ...
    (talk.origins)
  • Re: yahoo server generated code /wont validate
    ... Perhaps you can convince the support layer to push people up above ... > don't host with sbcyahoo. ... give them a reason to do something on the matter. ... Roy S. Schestowitz ...
    (alt.html)