Home page logo

nanog logo nanog mailing list archives

Re: Where NAT disenfranchises the end-user ...
From: Brian Whalen <bri () sonicboom org>
Date: Sun, 9 Sep 2001 16:14:12 -0700 (PDT)

Not exactly, in your scenario you are counting on the firewall to block
hostile traffic destined for some ips.  If they are Natted, it is more
work to compromise those stations.

Brian "Sonic" Whalen
Success = Preparation + Opportunity

On Sun, 9 Sep 2001, Bob K wrote:

On Sun, 9 Sep 2001, Jared Mauch wrote:

    I think you are obviously missing the point that people
use nat to prevent inbound connections as part of their security

Every firewall I've ever seen allows you to do the exact same thing
without NAT.

Bob <melange () yip org> | Yes.  I know.  That is, indeed, *not* mayonnaise.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]