nanog mailing list archives

Re: Is NAT can provide some kind of protection?


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Thu, 13 Jan 2011 16:54:43 +0000


On Jan 13, 2011, at 9:59 AM, Jack Bates wrote:

The proxy capabilities of the firewall are additional security measures on top of the NAT (and definitely should be 
deployed for their higher security value).

Not in front of servers, they shouldn't - because they have a negative security value in that context.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

             Sell your computer and buy a guitar.





Current thread: