Security gain from NAT (was: Re: Cool IPv6 Stuff)

Valdis.Kletnieks at Valdis.Kletnieks at
Mon Jun 4 18:54:01 UTC 2007

On Mon, 04 Jun 2007 11:32:39 PDT, Jim Shankland said:
> *No* security gain?  No protection against port scans from Bucharest?
> No protection for a machine that is used in practice only on the
> local, office LAN?  Or to access a single, corporate Web site?

Nope. Zip. Zero. Ziltch.  Nothing over and above what a good properly
configured stateful *non*-NAT firewall should be doing for you already.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <>

More information about the NANOG mailing list