nanog mailing list archives

Re: Is NAT can provide some kind of protection?


From: Valdis.Kletnieks () vt edu
Date: Wed, 12 Jan 2011 12:12:10 -0500

On Wed, 12 Jan 2011 16:01:15 +0100, =?ISO-8859-1?Q?Lor=E1nd_Jakab?= said:

This setup will provide *less* security. Apart from the DoS scenario,
should your public facing server get compromised, you have given easy
access to your private infrastructure.

If a public server behind a NAT gets whacked via a php vulnerability, you've
*still* given away access to everything behind the NAT that server can reach.


Attachment: _bin
Description:


Current thread: