Is NAT can provide some kind of protection?

William Herrin bill at herrin.us
Thu Jan 13 17:56:58 UTC 2011


On Thu, Jan 13, 2011 at 11:54 AM, Dobbins, Roland <rdobbins at arbor.net> wrote:
> On Jan 13, 2011, at 9:59 AM, Jack Bates wrote:
>> The proxy capabilities of the firewall are additional security
>> measures on top of the NAT (and definitely should be
>> deployed for their higher security value).
>
> Not in front of servers, they shouldn't - because they have a negative security value in that context.

So all the folks who use reverse proxies like an http accellerator are wrong?


-- 
William D. Herrin ................ herrin at dirtside.com  bill at herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004




More information about the NANOG mailing list