On Fri, 09 Jul 2010 00:43:33 +0200 Thiago Macieira <[email protected]> wrote:
> On Friday 9. July 2010 00.20.29 Yves-Alexis Perez wrote: > > On jeu., 2010-07-08 at 19:29 +0200, Thiago Macieira wrote: > > > IPv6 will not remove firewalls. People will have unique > > > addresses, but reachability is not a guarantee. > > > > And with IPv6 end-to-end is (again) the norm, not the exception. The > > filtering should be done on the box itself, not at the perimeter. > > Uh... no. > > The IPv6 protocol makes NAT unnecessary, but firewalls at perimeters > will continue to exist. I doubt companies will allow any packet from > the Internet to reach their intranets. > Actually the target audience is more private households, mobile devices and such. No company there really has any business telling the individual users that they can't receive connections, except perhaps that they want to charge extra for it. For households, filtering should really be done at the household router. For mobile devices, it HAS to be done at the device - you can't rely on a friendly environment. -- Bernd Stramm <[email protected]> _______________________________________________ MeeGo-dev mailing list [email protected] http://lists.meego.com/listinfo/meego-dev
