Добро пожаловать, Гость. Пожалуйста авторизуйтесь здесь.
FGHIGate на GaNJa NeTWoRK ST@Ti0N - Просмотр сообщения в эхоконференции IPV6
Введите FGHI ссылку:


Присутствуют сообщения из эхоконференции IPV6 с датами от 31 Jul 11 14:37:00 до 03 Oct 24 21:46:09, всего сообщений: 7440
Ответить на сообщение К списку сообщений Предыдущее сообщение Следующее сообщение
= Сообщение: 4053 из 7440 ============================================= IPV6 =
От   : Tony Langdon                     3:633/410          14 Jan 17 15:42:00
Кому : Michiel van der Vlist                               14 Jan 17 15:42:00
Тема : Re: Connect...??
FGHI : area://IPV6?msgid=2510.fido-ipv6@3:633/410+1cdef0a1
На   : area://IPV6?msgid=2:280/5555+58796e2a
= Кодировка сообщения определена как: CP866 ==================================
Ответ: area://IPV6?msgid=2:240/1661+587a5cc9
==============================================================================
-=> Michiel van der Vlist wrote to Tony Langdon <=-

MvV> Indeed, it is a firewall function. What, in my opinion, went wrong is
MvV> that the IPv4 NAT was presented as a firewall. Which it isn't. Although
MvV> in some way NAT /acts/ as a firewall in that it blocks unsollicited
MvV> incoming packets, unless explicitly told what to do with it, it is not
MvV> a firewall. The blocking is just a emergent effect.

Again, we agree. :)

MvV> A real firewall is something different. If so configured, it also
MvV> blocks unsollicited incoming packets. But it can do more that that. It
MvV> can also detect certain kind of attacks, port scans, flooding etc. Plus
MvV> that a firewall can also act on outgoing traffic. OTOH, a firewall can
MvV> not do translation. It is not a NAT.

Again, agree.  Packet filtering is only one function that a firewall can
perform, as you point out.  Either way, it's not NAT.  NAT has a different
purpose - rewriting IP addresses to achieve some networking goal (most commonly
share a single public IP among multiple hosts).

MvV> I guess we will have to live with what seems to be evolving practice:
MvV> it is both called "forwarding"..

Looks like it. :(

MvV> I am a bad teacher, I won't even try..

:)


MvV> I put this new IPv6 capable modem/router into service six weeks ago. So
MvV> I had to delve into it again.

Mine's been in service for years.  I occasionally tweak it when I change
something on the LAN, last tweak was to put the HAMnet router as the IPv4
exposed host, so IP-IP encapsulation works.

TL> ... This is abuse, arguments are down the hall.

MvV> I loved that sketch! ;-)

Yes!  I haven't seen it for many years.


... Go on, be yourself!  There isn't anyone better qualified.
--- MultiMail/Win32 v0.49
* Origin: Freeway BBS - freeway.apana.org.au (3:633/410)

К главной странице гейта
Powered by NoSFeRaTU`s FGHIGate
Открытие страницы: 0.053620 секунды