From mboxrd@z Thu Jan  1 00:00:00 1970
From: erik quanstrom <quanstro@quanstro.net>
Date: Thu, 29 Apr 2010 19:57:34 -0400
To: 9fans@9fans.net
Message-ID: <1f5626954298d3d1eaf583aabcf19e9c@kw.quanstro.net>
In-Reply-To: <20100429234245.GA87408@willers.employees.org>
References: <5fa9fbfe115a9cd5a81d0feefe413192@quintile.net>
	<Pine.BSI.4.64.1004280750270.14121@malasada.lava.net>
	<4fa1305e0f56a0ef89c2e05320fa5997@coraid.com>
	<t2y13426df11004281142j3c735545k690dcfae6166cd4d@mail.gmail.com>
	<z2gdf49a7371004290540g29060151k700bac13f78f34dc@mail.gmail.com>
	<43de5c2167c0a4851aeafaa07a0b982d@kw.quanstro.net>
	<m2v3e1162e61004290736vf921c63am5c3bc0d00fb5eb54@mail.gmail.com>
	<816a521c149b06088f5023d3dfddf0ed@kw.quanstro.net>
	<28481.87344.qm@web1213.biz.mail.gq1.yahoo.com>
	<p2ke0ac85f91004291332lb7879bcu965eb31b7d8a6c85@mail.gmail.com>
	<20100429234245.GA87408@willers.employees.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Subject: Re: [9fans] A simple experiment
Topicbox-Message-UUID: 1433055c-ead6-11e9-9d60-3106f5b1d025

> I agree that NAT and stateful firewalls (e.g. 'ip inspect' in IOS)
> would need explicit support to understand the packet layout.

what il services would you apply spi to?  one doesn't
ftp or http over il.

> NAT - it should simply die,  until then
> run IL over IPv6 and avoid NAT?

il isn't defined over ip6.

why should nat die?  translating network addresses
from one network to another seems natural enough
to me—and quite similar to what various storage systems
do to present logical volumes.  why should renumber a formerly
private network because i'd like to hook it up to
the internet?  why should i renumber my network
because i change service providers?  why is using nat
to make many hosts look like one a bad thing?

- erik