[ipv6hackers] IPv6 security (slides and training)

[Marc Blanchet]

Le 2011-11-18 à 15:25, Marc Heuse a écrit :

>>> REALLY???? So give me some references of SP who have deployed NAT444???
>> 
>> Many mobile providers provide mifi hotspots or hotspots on phones that are
>> effectively Nat444.
> 
> one I know will move from NAT444 to NAT4444, no kidding.

of course, this happens already in the field, mobile operator or not, managed or not. it is pretty common to have two chained NATs in a home or public networks, then you add tethering and or connection sharing and a CGN in the upstream provider, you have easily 4 NATs in the path. (and "nobody" cares because the "Internet is over http").

Marc.


> for gprs/umts they would want to run dual stack, and that is not
> possible with the chips in the mobile phones. the newest generation
> does, but they are just put into the newest phones, so they must add
> another NAT layer
> 
> Greets,
> Marc
> 
> --
> Marc Heuse
> Mobil: +49 177 9611560
> Fax: +49 30 37309726
> www.mh-sec.de
> 
> Marc Heuse - IT-Security Consulting
> Winsstr. 68
> 10405 Berlin
> 
> Ust.-Ident.-Nr.: DE244222388
> PGP: FEDD 5B50 C087 F8DF 5CB9  876F 7FDD E533 BF4F 891A
> _______________________________________________
> Ipv6hackers mailing list
> Ipv6hackers at lists.si6networks.com
> http://lists.si6networks.com/listinfo/ipv6hackers