On Wed, Mar 14, 2012 at 9:07 PM, Cameron Byrne <cb.li...@gmail.com> wrote:
<snip>
> Making IPv6 restore e2e, or the internet model, is a worthy goal and i
> am glad to help... But, if HOMENET is throwing in the towel, i can
> lurk somewhere else and you folks can keep debating about OSPF vs RIP
> and thinking that SPI makes something secure.

I don't think we should throw in the towel just yet.... as I see it,
homenet should by default _not_ care about traffic into homenet. That
is the CPE's job. A seperate feature and function.

However, homenet should _support_ the creation of several security
"zones" internaly
* One that is isolated toward The Big Bad World (Internet), no
communication toward the CPE functionality
* One that _ask_ the CPE to block all traffic into it
* One that allow every packet that flow.....
* whatever else we might figure out etc...

The only default one should be allow all (leave the job to CPE)



-- 

Roger Jorgensen           |
rog...@gmail.com          | - IPv6 is The Key!
http://www.jorgensen.no   | ro...@jorgensen.no
_______________________________________________
homenet mailing list
homenet@ietf.org
https://www.ietf.org/mailman/listinfo/homenet

Reply via email to