Re: Domain Centric Administration, RE: draft-ietf-v6ops-natpt-to-historic-00.txt

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Keith Moore wrote:
>
> word I hear is that Vista's enabling of such technologies is causing
> problems for enterprise networks because their traffic filters and
> intrusion detectors aren't set up to handle them.

It is trivial to filter teredo (knock down udp 3544) and I think you can
rest assured that enterprises are having no trouble doing so.
Organizations with internal default deny policies break teredo just like
they do everything else (I'm not advocating a position, just making an
observation).

If you want to selectively apply policy to packets inside encapsulated
teredo connections between clients you're going to have to do some work
(this applies generically to any tunneled protocol).

http://tools.ietf.org/html/draft-hoagland-v6ops-teredosecconcerns-00#section-3

joelja

> 
> _______________________________________________
> Ietf mailing list
> Ietf@xxxxxxxx
> https://www1.ietf.org/mailman/listinfo/ietf
> 


_______________________________________________

Ietf@xxxxxxxx
https://www1.ietf.org/mailman/listinfo/ietf

[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]