Not logged in
Log in now
Create an account
Subscribe to LWN
LWN.net Weekly Edition for December 5, 2013
Deadline scheduling: coming soon?
LWN.net Weekly Edition for November 27, 2013
ACPI for ARM?
LWN.net Weekly Edition for November 21, 2013
Actual *clickable* interfaces.
Stateful ipv6 firewalls are here today
Posted Oct 16, 2012 17:56 UTC (Tue) by raven667 (subscriber, #5198)
No one is suggesting that end-users need to write their own rules to an iptables-save file by hand, attacking that is a straw man.
Posted Oct 16, 2012 21:29 UTC (Tue) by bronson (subscriber, #4806)
All I'm saying is, once IPv6 routers can be configured to do selective ingress as easily as IPv4 routers, we will all celebrate. That day is not here yet. (or wasn't at the end of 2011, the last time I shopped for a new wifi access point).
Posted Oct 18, 2012 0:56 UTC (Thu) by marcH (subscriber, #57642)
The interface of IPv4 routers has generally been horrible. It doesn't matter because you don't even have a choice; you need the default setting = NAT enabled. Consumers must find their IPv4 routers very easy to use indeed since most they don't have to use them at all. Even gamers don't have to any more since UPnP. The vast majority has no idea what a NAT is and does not need to know.
So yes: IPv6 is a new problem in a way because now you do have the choice of filtering versus not. A good problem/checkbox to have. Giving people this checkbox is exactly what IPv6 is all about.
Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds