On Dec 6, 2010, at 8:35 AM, Jeff Johnstone wrote:
Speaking of IPV6 security, is there any movement towards any open source IPV6 firewall solutions for the consumer / small business?
Almost all the info I've managed to find to date indicates no support, nor any planned support in upcoming releases.
Any info would be helpful.
Honestly (and I'm sure some IPv6 folks will want me injured as a result) there should be some '1918-like' space allocated for the corporate guys who "don't get it", so they can nat everyone through a single /128. It would make life easier for them and quite possibly be a large item in pushing ipv6 deployment in the enterprise. I don't see our corporate IT guys that number stuff in 1918 space wanting to put hosts on 'real' ips. The chances for unintended routing are enough to make them say that v6 is actually a security risk vs security enabler is my suspicion. - Jared