Have they stopped teaching Defense in Depth?

Tue Nov 15 22:01:09 UTC 2011

On Tue, Nov 15, 2011 at 4:50 PM, Mark Andrews <marka at isc.org> wrote:
> If you want to use unroutable addresses then use a bastion host /
> proxy.  Don't expect to be able to open a TCP socket and have it
> connect to something on the outside.  Do it right or don't do it
> at all.

Mark,

What is a modern NAT but a bastion host proxy for which application
compatibility has been maximized?

Regards,
Bill Herrin

-- 
William D. Herrin ................ herrin at dirtside.com  bill at herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004