[afripv6-discuss] What are the benefits of IPv6 over IPv4

[Mark Tinka]

On Sunday, June 03, 2012 07:44:48 PM Kondwani C. Hara wrote:

> That's a big bug ipv6 has.

Well, then you can say that it's a big bug IPv4 has too.

NAT66 is present, just as there is NAT44, and it's 
implemented on decent firewalls and the Linux kernel.

That said, one should not think of NAT as being a security 
layer. That was an unintended side effect, and might have 
been useful when attacks were purely network-based.

These days, attacks come from e-mail phishing, web scripting 
vulnerabilities that exploit your browsers, e.t.c. No amount 
of NAT will protect you from that, and yet it's now the 
trend.

Moreover, just because you're protecting 1,000 machines from 
the big bad outside world with NAT, doesn't mean you're 
immune from attacks within your own corporate LAN. Most 
times, it's the ones on the inside that will really get you.

The network that deploys public IP addresses to the LAN and 
has a decent firewall at the edge is in a much better 
position than one which relies on NAT.

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
Url : https://lists.afrinic.net/pipermail/afripv6-discuss/attachments/20120604/4ff109b2/attachment.bin