On Mon, Sep 27, 1999 at 11:39:19PM +0100, Alan Cox wrote:
> > I'm actually with Alexey on IPv6 <-> IPv6 masquerading. It's a horrible
> > hack. If your ISP gives you only a single IPv6 address then they really
> > need to be beaten with a the pointed end of a cluestick.
>
> Expect one address. They can charge lots extra for business service if you
> want several. Its about service differentiation not about cluesticks
I think masquerading is a useful additional firewall layer. It makes it
simply impossible to talk to hosts hidden behind the firewall unless _they_
make the first move. Unlike traditional firewalling ("Hmm, do I really need
to close off this port? I guess not.") it's quite difficult to screw up.
Have fun,
Avery
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
