> On 20 Jun 2007, at 11:00, Mark Smith wrote:
> >
> > Getting rid of PAT doesn't eliminate a number of other problems that
> > NAT creates, which Keith Moore has documented here :
> >
> > http://www.cs.utk.edu/~moore/what-nats-break.html
>
> I'd be more sympathetic to arguments like this if we RFC 4864 didn't =20
> insist on recommending the deployment of stateful packet filters in =20
> IPv6 that break most of the things NAT breaks in IPv4.
>
> > I particularly think inhibiting deploying new transport layer =20
> > protocols is a real drawback of NAT. [...]
>
> That's one of the things broken by the stateful packet filters =20
> implied by RFC 4864. It seems to me that NAT for IPv6 isn't really =20
> all that worse than what we've already recommended there. Sure, =20
> everything is still globally addressable, but that really doesn't go =20
> very far when symmetrical reachability is pretty much broken for =20
> everything at the edges of the Internet.
>
> If people think they can make arguments for why NAT between ULA-C =20
> addresses and PA address will solve more problems than it really =20
> causes=97 given what other problems we've already bought with the RFC =20=
>
> 4864 packet filters=97 then I think we should hear them.
It's much easier to have a application talk to a firewall if
it doesn't also have to deal with address/port translations
that it is not aware of.
> --
> james woodyatt <[EMAIL PROTECTED]>
> member of technical staff, communications engineering
>
>
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: [EMAIL PROTECTED]
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------
