Mailinglist Archive: opensuse (933 mails)

< Previous Next >
Re: [opensuse] IPv6 firewall
  • From: Per Jessen <per@xxxxxxxxxxxx>
  • Date: Sun, 06 Jun 2010 13:44:51 +0200
  • Message-id: <hug1nj$nvs$4@xxxxxxxxxxxxxxxx>
Hans Witvliet wrote:

Also, NAT is at best a bad hack to extend IPv4.

Well, maybe that is matter of opinion, but I would say that NAT is a
very useful mechanism for connecting RFC1918 networks with the
outside world.

No problem for people who only initiate towards internet.
Problem arises when those people want to be reachable.

In iptables speak "destination NAT'ing" - no problems, it works very
well.

True, that not everybody wants their own web/mail/torrent server,
but a growing number of people are using voip. Though SIP works with
nat, it's a cause of many problems...

Don't most SIP devices have a tickbox for "NAT keep-alive" these days?
Anyway, running a stun daemon takes care of it.


--
Per Jessen, Zürich (25.2°C)

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >