4 ms·

I wonder if any of this is related to the new NIST Standards[1], which have to be followed by research labs who receive government funding. I could see MIT, alr

I wonder if any of this is related to the new NIST Standards[1], which have to be followed by research labs who receive government funding. I could see MIT, already having to retrofit a lot of their research networks, also changing around the network architecture in other places aswell. [1]:http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171.pdf http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP...

hawkling 9y ago
Nah, NAT doesn't provide the security; firewalling does. Besides, what kind of controlled unclassified information could possibly be residing on dormitory networks?
- russellbeattie 9y ago
  Sorry, but NAT provides practical security for all but the most pedantic use cases. I'm terrified of IPv6 for this exact reason - it assumes every device will have direct access to the Internet. As we've seen with security cameras and other IoT devices, they just aren't designed to protect themselves and are easily hackable, so making them accessible to the wider Internet is crazy. Firewall options for IPv6 for most home routers are limited at best at the moment... I for one am quite happy to have all my local devices happily running behind an IPv4 NAT (in addition to a firewall), knowing they can't be targeted directly without some sort of concerted effort.
  - cr0sh 9y ago
    IPv6 supports NAT...
    - giobox 9y ago
      True, but I think its fair to say the crazy wide proliferation of IPv4 NAT in consumer routers wouldn't have been nearly as large if IPv4 address exhaustion hadn't been a very real thing forcing hands. IPv6, at least for the foreseeable future, doesn't have this motivating factor for using NAT. I completely agree in principle with the old adage "NAT is not a firewall", but in reality it often effectively works as one for many consumers, many of whom probably don't have the technical knowledge to understand the protection it has indirectly afforded them for the past however many years.
lucb1e 9y ago
PDF is titled "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations"

hawkling 9y ago

Nah, NAT doesn't provide the security; firewalling does. Besides, what kind of controlled unclassified information could possibly be residing on dormitory networks?

russellbeattie 9y ago
Sorry, but NAT provides practical security for all but the most pedantic use cases. I'm terrified of IPv6 for this exact reason - it assumes every device will have direct access to the Internet. As we've seen with security cameras and other IoT devices, they just aren't designed to protect themselves and are easily hackable, so making them accessible to the wider Internet is crazy. Firewall options for IPv6 for most home routers are limited at best at the moment... I for one am quite happy to have all my local devices happily running behind an IPv4 NAT (in addition to a firewall), knowing they can't be targeted directly without some sort of concerted effort.
- cr0sh 9y ago
  IPv6 supports NAT...
  - giobox 9y ago
    True, but I think its fair to say the crazy wide proliferation of IPv4 NAT in consumer routers wouldn't have been nearly as large if IPv4 address exhaustion hadn't been a very real thing forcing hands. IPv6, at least for the foreseeable future, doesn't have this motivating factor for using NAT. I completely agree in principle with the old adage "NAT is not a firewall", but in reality it often effectively works as one for many consumers, many of whom probably don't have the technical knowledge to understand the protection it has indirectly afforded them for the past however many years.

lucb1e 9y ago

PDF is titled "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations"