Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Jul 2014 19:42:11 +1000
From:      Darren Reed <darrenr@freebsd.org>
To:        Kevin Oberman <rkoberman@gmail.com>
Cc:        FreeBSD Current <freebsd-current@freebsd.org>
Subject:   Re: Future of pf / firewall in FreeBSD ? - does it have one ?
Message-ID:  <53D76C73.4010201@freebsd.org>
In-Reply-To: <CAN6yY1uHJn4xA-5zFr4fZez3FyXi7tT0LmhyR8yWkqG7k1A%2B=A@mail.gmail.com>
References:  <201407261843.s6QIhcx4008597@slippy.cwsent.com>	<53D61AC6.5030305@freebsd.org> <CAN6yY1uHJn4xA-5zFr4fZez3FyXi7tT0LmhyR8yWkqG7k1A%2B=A@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 29/07/2014 8:07 AM, Kevin Oberman wrote:
...
> And all IPv6 NAT is evil and should be cast into (demonic residence
> of your choosing) on sight!

For the most part, I agree with you but the problem is "checkbox"
comparisons. That IPv6 shouldn't be NAT'd is why I didn't implement
it for such a long time.

However given the problem that EIDs pose for privacy, I'm of the
opinion that maybe NAT66 does have a place but not in the way that
the NAT66 RFC prescribes.

Darren




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53D76C73.4010201>