Is NAT can provide some kind of protection?

Justin Scott leviathan at darktech.org
Thu Jan 13 05:02:36 UTC 2011


Unfortunately there are some sets of requirements which require this
type of configuration.  The PCI-DSS comes to mind for those who deal
with credit card transactions.

-Justin

On Wednesday, January 12, 2011, Dobbins, Roland <rdobbins at arbor.net> wrote:
>
> On Mar 21, 2007, at 5:41 AM, Tarig Ahmed wrote:
>
>> Security guy told me is not correct to assign public ip to a server, it should have private ip for security reasons.
>
> He's wrong.
>
>> Is it true that NAT can provide more security?
>
>
> No, it makes things worse from an availability perspective.  Servers should never be NATted or placed behind a stateful firewall.
>
> -----------------------------------------------------------------------
> Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
>
>              Sell your computer and buy a guitar.
>
>
>
>
>




More information about the NANOG mailing list