Re: draft-ietf-v6ops-cpe-simple-security-06

[Gert Doering <gert@space.net>]

Hi,

On Fri, Jun 26, 2009 at 04:08:47PM +0200, Rémi Després wrote:
> - I had to open the Mac to incoming VNC connections from another  
> computer of the site.
> - If I had opened the VNC port in the Mac without disabling IPv6,  
> this would have opened it also for connections from any host of the  
> IPv6 global Internet.

I'd argue that this is something that should be improved in the 
"host firewall" - instead of "completely closed" and "opened from 
everywhere", there should be a third state "open for connections from the 
local network"...

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  128645

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279