On Tue, 2005-08-23 at 16:53:25 -0600, Theo de Raadt proclaimed... > It is plain simple bad advice. And totally ridiculous.
And plus, with ipv6, it's imperative that the filters be pushed down to the end-host so we can quit relying on stupid firewalls and NAT bullshit to break networks and slow progress. Itojun mentioned the fact that each host should have a "firesuit" in the ipv6 world. It's quite good advice.
