Is NAT can provide some kind of protection?

Wed Jan 12 15:01:15 UTC 2011

On 01/12/2011 02:59 PM, Nick Hilliard wrote:
> On 21/03/2007 09:41, Tarig Ahmed wrote:
>> Is it true that NAT can provide more security?
>
> No.
>
> [snip]
>
> Your security guy will probably say that a private IP address will
> give better protection because it's not reachable on the internet. 
> But the reality is if you have 1:1 NAT to a server port, then you have
> reachability and his argument becomes substantially invalid.

This setup will provide *less* security. Apart from the DoS scenario,
should your public facing server get compromised, you have given easy
access to your private infrastructure.

-Lorand Jakab