Re: NAT / dynamic IP addresses

[Scott Bradner <sob () HARVARD EDU>]

I do not think that the use of non-routable dynamic IP addresses using NAT
solves the primary security problems - remote hackers are not generally
anywhere as dangerious as virsus or disgrunteled employees

if you are talking about research/student machines as well as admin
machines then I would suggest that you rethink the implications
NATs also hurt the ability to deploy many types of applications (VoIP
for example)

see http://www.nwfusion.com/columnists/2003/0317bradner.html
for more on the topic and take a look at the pointers

Scott

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.