[AusNOG] IPv6 excuses

[Mark Andrews]

In message <82806b8920f24ffd9a29fddd56487fed at TN-EX02.tasmanet.com.au>, Philip L
oenneker writes:
> I'm curious to know if/how providers that have enabled IPv6 are protecting
> users after the introduction of IPv6. The majority of end users are not
> capable, and probably should not be expected to be capable, of maintaining
> a suitable firewall. The wide variety of routers available would offer an
> equally wide variety of protection to IPv6 clients. 
> 
> Despite all the shortcomings, NAT provides a very convenient barrier between 
> the Internet and customer internal networks. 

It isn't the ISP's job.

OpenWRT and the like provide a firewall that is as easy to configure
as a NAT.

If manufacturers are selling consumer equipement that is incapable
of being exposed to the net directly they should be being fined for
selling substandard products and be forced to recall / provide
updates.  Lots of consumer equipement already meets this level.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org