RE: draft-huitema-v6ops-unmaneval-00.txt

[Pekka Savola <pekkas@netcore.fi>]

On Sat, 15 Mar 2003, Christian Huitema wrote:
> When it comes to traversing NAT, the issue is how to "come in", not how
> to "go out". AFAIK, teredo is the only solution that allows "self
> deploy" because it let UDP packets "come in". All the other solutions
> are variations on fixed tunnels, and thus require some form of contract
> between a user and a tunnel endpoint. 

By "coming in" you probably refer to "coming in without an explicit 
tunnel".

Not being to just "come in" could be considered a feature, too.

Especially if "coming in" doesn't work on any properly implemented
(=secure) NAT boxes.

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings