On Wed, Mar 14, 2012 at 9:07 PM, Cameron Byrne <cb.li...@gmail.com> wrote: <snip> > Making IPv6 restore e2e, or the internet model, is a worthy goal and i > am glad to help... But, if HOMENET is throwing in the towel, i can > lurk somewhere else and you folks can keep debating about OSPF vs RIP > and thinking that SPI makes something secure.
I don't think we should throw in the towel just yet.... as I see it, homenet should by default _not_ care about traffic into homenet. That is the CPE's job. A seperate feature and function. However, homenet should _support_ the creation of several security "zones" internaly * One that is isolated toward The Big Bad World (Internet), no communication toward the CPE functionality * One that _ask_ the CPE to block all traffic into it * One that allow every packet that flow..... * whatever else we might figure out etc... The only default one should be allow all (leave the job to CPE) -- Roger Jorgensen | rog...@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | ro...@jorgensen.no _______________________________________________ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet