Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Firewall Wizards: Re: Free NAT for NT?

Re: Free NAT for NT?

From: Darren Reed <darrenr_at_reed.wattle.id.au>
Date: Wed, 8 Sep 1999 21:29:39 +1000 (EST)

In some email I received from Carl Brewer, sie wrote:
> I'm not coming down on Robert here!
>
> <rant>
> It's a shame that M$ are providing NAT, which even they know
> is a bad technology (it was a M$ employee that wrote the IETF
> case against NAT), and not IPv6. Please don't lose focus! NAT
> is a short-term ugly broken hack, push your vendor(s) for IPv6
> support!
>
> http://www.ietf.org/internet-drafts/draft-iab-nat-implications-04.txt
> http://www.ietf.org/internet-drafts-ietf-iab-case-for-ipv6-04.txt
>
> If you're using, or worse, planning to use, NAT and you haven't
> read the above two documents, read them :)
> </rant>
>
> Carl

I wonder, whether NAT will be resurrected from the dead by someone
who believes in the added security of address translation. Indeed,
security through obscurity, but as another part of defense, it does
help hide the real source of Internet activity which an attacker
might wish to target. Of course this only holds so long as the NAT
is one-way or asymetric.

Darren
Received on Sep 08 1999

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]