Re: [ipv6-wg] Commercial IPv6 firewall support

[Dennis Lundstrom dennislun@localhost]

I believe that the biggest obstacle here, is education, and scheduling.
This issue have to get more time in the board-rooms, and be discussed  
at a higher level.
If management does not understand the severity, and the application.  
They will most likely never apply funds for research and training  
needed.
Much of our economy is based on resources, that we will eventually one  
day run out on.
Looking at the sky-rocketing oil-prices. I doubt that we want the same  
thing happening to IPv4. though we can set up policy against third  
party trade of address-space.
This will most likely happen on an organized level anyway. The thing  
is, If we draw parallels to the oil industry. Let's face it,we got the  
technology today to quit our dependency of IPv4.
Another big issue is IPv6 support in SOHO market. More home-use IP- 
enabled equipment need to support IPv6 out of the box.
Best regards.

--Dennis Lundström
  Adamo Europe S.L (AS35699)




On 7 nov 2007, at 10.34, Patrik Wallstrom wrote:

> On Fri, 26 Oct 2007, michael.dillon@localhost wrote:
>
> > Some people have claimed that they cannot yet sell
> > IPv6 Internet access because there is no IPv6 firewall
> > support. According to this ICANN study:
> > http://www.icann.org/committees/security/sac021.pdf
> > this is not quite true. At least 30% of the 42 vendors
> > surveyed, had IPv6 support.
> >
> > According to this talk
> > <http://www.guug.de/veranstaltungen/ecai6-2007/slides/2007-ECA-I6-Status
> > -IPv6-Firewalling-PeterBieringer-Talk.pdf>
> > many open-source and commercial firewalls supporting IPv6 are  
> > available.
> > IPCop is based on Linux
> > <http://www.ipcop.org/index.php?module=pnWikka&tag=IPCopScreenshots>
> >
> > m0n0wall is based on FreeBSD
> > <http://m0n0.ch/wall/screenshots.php>
> >
> > pfSense is also based on FreeBSD
> > <http://pfsense.com/index.php?id=26>
> >
> > FWBuilder is a management tool that builds filter setups for
> > several different firewalls.
> > <http://www.fwbuilder.org/archives/cat_screenshots.html>
> [...]
>
> I am not really sure this list contains routers that really really
> supports tested IPv6 routing, or just of those that say they do. For
> example FWBuilder here does not support IPv6 other than (from the
> changelog in the latest version) "... option to the firewall settings
> dialog for iptables that controls whether compiler should skip
> generation of the code to set default policy of all ipv6 chains to
> DROP", and that is all v6 support there I can find.
>
> --
> patrik_wallstrom->foodfight->pawal@localhost+46-733173956