Is NAT can provide some kind of protection?
William Herrin
bill at herrin.us
Thu Jan 13 17:56:58 UTC 2011
On Thu, Jan 13, 2011 at 11:54 AM, Dobbins, Roland <rdobbins at arbor.net> wrote:
> On Jan 13, 2011, at 9:59 AM, Jack Bates wrote:
>> The proxy capabilities of the firewall are additional security
>> measures on top of the NAT (and definitely should be
>> deployed for their higher security value).
>
> Not in front of servers, they shouldn't - because they have a negative security value in that context.
So all the folks who use reverse proxies like an http accellerator are wrong?
--
William D. Herrin ................ herrin at dirtside.com bill at herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004
More information about the NANOG
mailing list