On Thu, 3 Feb 2011, Iljitsch van Beijnum wrote:
On 3 feb 2011, at 17:16, Jon Lewis wrote:
When someone breaks or shuts off that filter, traffic through the NAPT firewall stops working. On the stateful firewall with public IPs on both sides, everything works...including the traffic you didn't want.
People are going to want NAT66...and not providing it may slow down IPv6 adoption.
Hm, if you turn off the NAT66 function, wouldn't the traffic pass through unhindered, too?
Outbound traffic would. Inbound, if on the inside, you're using IPv6 space that's not globally routed, won't. Just like what happens now with NAPT with rfc1918 space on the inside when you stop doing translation...private IP traffic leaks out...but nothing comes back because there is no return path. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________