Is NAT can provide some kind of protection?

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Wed Jan 12 21:22:51 UTC 2011


On Wed, 12 Jan 2011 16:05:42 EST, Scott Helms said:
> > That's simply not true. Every end user running NAT is running a stateful firewall with a default inbound deny.

> Really?  I just tested this with 8 different router models from 5 
> different manufacturers and in all cases the default behavior was the 
> same.  Put a public IP on a PC behind the router

At which point you're not running NAT, so it's a different configuration than
the one under discussion.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20110112/e3742b99/attachment.sig>


More information about the NANOG mailing list