[Info-vax] "Linux Shminux - IPsec is Snake Oil!" VMS Mgmnt

[Richard B. Gilbert]

Bob Eager wrote:
> On Mon, 13 Apr 2009 14:26:27 UTC, "Richard B. Gilbert" 
> <rgilbert88 at comcast.net> wrote:
> 
>> A lot of people who are using the RFC-1918 private address spaces 
>> couldn't care less about IPv6.  I have ONE valid IP address on the 
>> public side of my router.  Everything else is 192.168.1.X.
> 
> Maybe. Mine is the opposite. Everything has a public IP address.
> 
>>  If Comcast 
>> implements IPv6, and they haven't said a word to their customers about 
>> it yet, we may have to get a new router but I doubt that anything else 
>> will change.
> 
> My ISP already provides IPv6.
> 
>>  I certainly don't want the Internet to have access to my 
>> systems, now or ever.
> 
> And NAT may help, but a proper firewall is better.

Well, my router will not pass any incoming packets that are not a 
response to an outgoing packet.  Every connection must be initiated from 
inside.  It's just as well.  My router logs show that somebody probes my 
external address about every fifteen or twenty seconds.  Fat lot of good 
it does them!!