Re:The world in which IPv6 was a good design (2017)
by mikewarot on Wednesday December 30, 2020 @11:46AM
(#25583205)
You misunderstand the depths of my pessimism.
I don't believe any firewall out there is fit for purpose, because the OS on which it is based is likely to be insecure. On top of that OS would then be the firewall software itself.
I would truly love to be proved wrong, but mathematically proven systems are few and far between.
You should put them behind NAT if you want to connect your network to the internet but you don't have enough IP space to do it. It has nothing to do with how secure you think your OSs are.