I believe that the biggest obstacle here, is education, and scheduling. This issue have to get more time in the board-rooms, and be discussed at a higher level. If management does not understand the severity, and the application. They will most likely never apply funds for research and training needed. Much of our economy is based on resources, that we will eventually one day run out on. Looking at the sky-rocketing oil-prices. I doubt that we want the same thing happening to IPv4. though we can set up policy against third party trade of address-space. This will most likely happen on an organized level anyway. The thing is, If we draw parallels to the oil industry. Let's face it,we got the technology today to quit our dependency of IPv4. Another big issue is IPv6 support in SOHO market. More home-use IP- enabled equipment need to support IPv6 out of the box. Best regards. --Dennis Lundström Adamo Europe S.L (AS35699) On 7 nov 2007, at 10.34, Patrik Wallstrom wrote:
On Fri, 26 Oct 2007, michael.dillon@bt.com wrote:
Some people have claimed that they cannot yet sell IPv6 Internet access because there is no IPv6 firewall support. According to this ICANN study: http://www.icann.org/committees/security/sac021.pdf this is not quite true. At least 30% of the 42 vendors surveyed, had IPv6 support.
According to this talk <http://www.guug.de/veranstaltungen/ecai6-2007/slides/2007-ECA-I6-Status -IPv6-Firewalling-PeterBieringer-Talk.pdf> many open-source and commercial firewalls supporting IPv6 are available.
IPCop is based on Linux <http://www.ipcop.org/index.php?module=pnWikka&tag=IPCopScreenshots>
m0n0wall is based on FreeBSD <http://m0n0.ch/wall/screenshots.php>
pfSense is also based on FreeBSD <http://pfsense.com/index.php?id=26>
FWBuilder is a management tool that builds filter setups for several different firewalls. <http://www.fwbuilder.org/archives/cat_screenshots.html>
[...]
I am not really sure this list contains routers that really really supports tested IPv6 routing, or just of those that say they do. For example FWBuilder here does not support IPv6 other than (from the changelog in the latest version) "... option to the firewall settings dialog for iptables that controls whether compiler should skip generation of the code to set default policy of all ipv6 chains to DROP", and that is all v6 support there I can find.
-- patrik_wallstrom->foodfight->pawal@blipp.com->+46-733173956