Mailinglist Archive: opensuse (1837 mails)

< Previous Next >
Re: [opensuse] Moving to IPv6
  • From: James Knott <james.knott@xxxxxxxxxx>
  • Date: Sat, 11 Sep 2010 16:00:19 -0400
  • Message-id: <4C8BDFD3.3000607@xxxxxxxxxx>
Per Jessen wrote:
Impossible for you to know, but my customers networks are none of my
concern. Regardless, what you're asking is impossible unless you've
got at least one routable IP for that customer.
My mistake. I thought you were in the business of setting up networks for businesses. I have done so many times and yes, I do have to know what they want.

If they get a real IP address and use NAT internally, you could still
> run a VPN to their firewall, but what if they want to have VPNs
> directly to computers behind their firewall? Now things start to
> get messy.
A bit far fetched I think, but it's up the customer to sort out, not me.

It's not that far fetched if they're really worried about security. A VPN that terminates on the firewall only protects that far. It does nothing for risks on the local network. In some situations, that may be important. I have worked in places where my fingerprints have been scanned or I have been weighed, coming and going, and also gone through security checks & scans, similar to those at the airports. Those sorts of places are very concerned about security.




--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
This Thread