owen at delong.com
Sun Feb 6 10:22:55 CST 2011
> Firewalls merely constrict it. Not that I advocate against the use of
> in fact, I think I'm agreeing with you, and extending the argument a little
> that we should move from NAT to firewalls, then from stateful firewalls to
> secure hosts and network security appliances.
I would be fine with that. However, in terms of the art of the possible
with the tools available today, IPv6 has no need of NAT, but, firewalls
cannot yet be safely removed from the equation.
More information about the NANOG