nanog mailing list archives

Re: Consumer Grade - IPV6 Enabled Router Firewalls.


From: Simon Perreault <simon.perreault () viagenie ca>
Date: Fri, 11 Dec 2009 07:41:59 -0500

Mark Newton wrote, on 2009-12-11 03:09:
You kinda do if you're using a stateful firewall with a "deny
everything that shouldn't be accepted" policy.  UPnP (or something
like it) would have to tell the firewall what should be accepted.

That's putting the firewall at the mercy of viruses, worms, etc. The firewall
shouldn't trust anything else to tell it what is good and bad traffic.

Simon
-- 
DNS64 open-source   --> http://ecdysis.viagenie.ca
STUN/TURN server    --> http://numb.viagenie.ca
vCard 4.0           --> http://www.vcarddav.org


Current thread: