Re: proxy firewalls -vs- packet filters

Bennett Todd wrote:
> Probably a naive question, but is there any possibility ipv6 might
> tear open a gap in the range of available firewall products that
> user-space application layer proxy firewalls could fill faster than
> the heuristics for packet filtering can run over enough toes to
> discover the necessary subtlties?

Probably a snarky answer, but I thought that when the switchover
to iPv6 happens, nobody'll need firewalls anymore.

mjr.
-- 
Marcus J. Ranum		CSO, Tenable Network Security, Inc.
			http://www.tenable.com