| ▲ | ok123456 3 hours ago | |
> never designed to be a security feature It's virtually always used with some firewall rules, so it sort of is? It's just dogma to insist that there are no security benefits to having a single choke point for traffic. | ||
| ▲ | p_l a minute ago | parent | next [-] | |
The firewall is very much a separate thing, and part of the efforts to make v6 properly available for home customers was introducing somewhat standard firewall setup that replicates what people think NAT does for security (and what NAT definitely does not do, if only by virtue of being broken by the classic connect/connect vs connect/listen connection) | ||
| ▲ | bigstrat2003 2 hours ago | parent | prev [-] | |
The firewall is what is providing security, not NAT. And you can equally easily have a firewall in front of an IPv6 network. | ||