4 ms·
>In the enterprise space, if you mention globally reachable address space, the discussion tends to end pretty fast because “its not secure”. Those people love t
by Hikikomori 6mo ago
>In the enterprise space, if you mention globally reachable address space, the discussion tends to end pretty fast because “its not secure”. Those people love their NAT.
Was also designed in the early 90s before security was taken seriously.
- ExoticPearTree 6mo ago> Was also designed in the early 90s before security was taken seriously. True, but since then it has transformed into “no one gets in because we have _private_ IP addresses”…
- Hikikomori 6mo agoTo be fair it's a pretty decent defense, in the early days of blaster and today with iot crap.
- Ekaros 6mo agoI would need to ask the follow up question. Okay so what happens when someone gets in? Say some idiot install something they should not. Or there is some vulnerability in something you allow in? Extra layers is good. But it does not mean you can forgo anything else.
- icedchai 6mo agoOkay, so you configure a firewall. NAT is not required.
- icedchai 6mo agoThe real problem is many "enterprises" have people who don't understand networking. NAT was a solution to IP address depletion. This is not a problem we have with IPv6. If security is taken seriously, I'm sure they can spend a few minutes and learn how to configure a IPv6 firewall that allows no inbound connections. It's basically the simplest configuration possible.