Re: [homenet] [homegate] HOMENET working group proposal

2011-08-08 Thread Ole Troan
Mark, > One think I haven't seen mentions w.r.t. firewalls is protecting > the rest of the world from compromised home machines. While ISP's > should be doing BCP 38 filtering, CPE devices should also be > filtering outgoing traffic that is not from a valid prefix. The > border CPE also needs t

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-08 Thread james woodyatt
On Aug 7, 2011, at 5:15 PM, Mark Andrews wrote: > > One think I haven't seen mentions w.r.t. firewalls is protecting the rest of > the world from compromised home machines. While ISP's should be doing BCP 38 > filtering, CPE devices should also be filtering outgoing traffic that is not > from

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-08 Thread Mark Baugher
; Behalf Of Roger Jørgensen >> Sent: Sunday, August 07, 2011 2:58 PM >> To: james woodyatt >> Cc: homenet@ietf.org; Fernando Gont >> Subject: Re: [homenet] [homegate] HOMENET working group proposal >> >> On Sun, Aug 7, 2011 at 3:18 AM, james woodyatt wrote: >

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Mark Andrews
One think I haven't seen mentions w.r.t. firewalls is protecting the rest of the world from compromised home machines. While ISP's should be doing BCP 38 filtering, CPE devices should also be filtering outgoing traffic that is not from a valid prefix. The border CPE also needs to filter ULA sou

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Wouter Cloetens
On 07/08/11 16:08, Russ White wrote: In one hand, we want the capability to reach anywhere we're allowed to from home. OTOH, if anything in my home is reachable from anywhere, we are back to the firewall paradigm. Why? You are still back to all the security disadvantages of firewalls - soft

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Cameron Byrne
On Aug 7, 2011 4:51 AM, "Sander Steffann" wrote: > > >> In the context of the HOMENET working group, one imagines that restoring general end-to-end reachability is arguably a worthy goal. > > > > +1 > > > +1 > +1 Cb > Sander > > ___ > homenet mailing l

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Russ White
>> In one hand, we want the capability to reach anywhere we're allowed to from >> home. OTOH, if anything in my home is reachable from anywhere, we are back >> to the firewall paradigm. >> > Why? You are still back to all the security disadvantages of firewalls - soft > chewy inside, etc. Reac

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread David R Oran
org] On >> Behalf Of Roger Jørgensen >> Sent: Sunday, August 07, 2011 2:58 PM >> To: james woodyatt >> Cc: homenet@ietf.org; Fernando Gont >> Subject: Re: [homenet] [homegate] HOMENET working group proposal >> >> On Sun, Aug 7, 2011 at 3:18 AM, james woodyat

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Pascal Thubert (pthubert)
etf.org] On > Behalf Of Roger Jørgensen > Sent: Sunday, August 07, 2011 2:58 PM > To: james woodyatt > Cc: homenet@ietf.org; Fernando Gont > Subject: Re: [homenet] [homegate] HOMENET working group proposal > > On Sun, Aug 7, 2011 at 3:18 AM, james woodyatt wrote: > > &

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Roger Jørgensen
On Sun, Aug 7, 2011 at 3:18 AM, james woodyatt wrote: > In the context of the HOMENET working group, one imagines that restoring > general end-to-end reachability is arguably a worthy goal.   +1 :-) -- Roger Jorgensen           | rog...@gmail.com          | - IPv6 is The Key! http://www.jo

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Sander Steffann
>> In the context of the HOMENET working group, one imagines that restoring >> general end-to-end reachability is arguably a worthy goal. > > +1 +1 Sander ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-07 Thread Ray Bellis
On 7 Aug 2011, at 02:18, "james woodyatt" wrote: > In the context of the HOMENET working group, one imagines that restoring > general end-to-end reachability is arguably a worthy goal. +1 (no hat) Ray ___ homenet mailing list homenet@ietf.org https:

Re: [homenet] [homegate] HOMENET working group proposal

2011-08-06 Thread james woodyatt
On Jun 29, 2011, at 19:57 , Fernando Gont wrote: > On 06/29/2011 11:38 PM, Cameron Byrne wrote: >> >> The opportunity for restoring e2e is one of the great opportunities of ipv6 > > This assumes that e2e reachability is a desired property for all networks. In the context of the HOMENET working