Security gain from NAT (was: Re: Cool IPv6 Stuff)

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Mon Jun 4 18:54:01 UTC 2007


On Mon, 04 Jun 2007 11:32:39 PDT, Jim Shankland said:
> *No* security gain?  No protection against port scans from Bucharest?
> No protection for a machine that is used in practice only on the
> local, office LAN?  Or to access a single, corporate Web site?

Nope. Zip. Zero. Ziltch.  Nothing over and above what a good properly
configured stateful *non*-NAT firewall should be doing for you already.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20070604/b23fcddb/attachment.sig>


More information about the NANOG mailing list