> From: [EMAIL PROTECTED]
> Date: Fri, 06 Oct 2000 14:38:52 +0900
> Sender: [EMAIL PROTECTED]
> Status: R
>
>
> >AFAIK, there's no reason why you can't do IPv6 NAT, and in fact, some
> >security policies may well require it.
>
> NAT does not improve security at all. there's no point introducing one
> if there's no address space shortage. if you would like to implement
> unidirectional communication, use packet filters. if you care about
> malicious packets, use TCP relays.
Agreed 100%, but I don't write the security policies.
Carl
---------------------------------------------------------------------
The IPv6 Users Mailing List
Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]