Re: [ILUG] localhost.localdomain considered harmful On Tue, 2007-10-09 at 16:07 +0100, Michael Watterson wrote:

> I like my NAT/Firewall keeps all the public evil out and my evil in. How 
> don't I know there aren't lots of bitey evil vulnerabilities in IPV6?


NAT != firewall. and NAT has some real downsides. IPv6 firewalls are not
very hard to do. i can post some examples if anyone is interested 

Scanning for vulnerabilities is much harder when each end user has a /48
to put stuff in. Random scans will become a strategy that does not pay
off. I read somewhere that at a 1,000 packets per second it will take 28
years to scan a single /48. Surely after the first 10 years or so you
might notice that your box was being scanned ;-0 

A 'free' market for IPv4 will come once all /8's are allocated but it
will not postpone IPv4 Exhaustion for very long at current growth rates.


brendan


