Re: Not that awful
"Don't know what you've been reading but no they can't unless you have a router with no firewall on it or you actually use the ISP provided router/firewall. I do networking for a living and rule one is you own and control your border (for a given value of own)."
Here's the problem. YOU'RE within the ISP's borders. And since the ISP knows which external IP they gave you, they can go from there to your router and, if the firewall wasn't there, route packets from there to your LAN. Another networking expert demonstrated it a few months ago.
Point is, it's not the NAT that guards your LAN from the outside but the firewall. And there's NOTHING stopping you from putting a firewall between your LAN and the IPv6 Internet. IOW, NAT is giving a false sense of security; attention needs to be focused on the firewall instead, which doesn't go away with IPv6.
Biting the hand that feeds IT
