Will a default-deny rule on incoming connections of an IPv6 firewall negate any advantages that were gained by not having NAT?
In other words, one of the most talked about advantages to IPv6 is that NAT is no longer necessary and endpoint addresses are no longer obfuscated to applications allowing direct connections between endpoints.
I can understand how this could benefit applications that are sensitive to throughput and/or latency such as voice and video communications. However, how would the internal network be protected from unsolicited traffic without breaking such apps.
Would hole punching (http://en.wikipedia.org/wiki/Hole_punching) provide a fix for this?