Re:So Long Last /8 and Thanks For All the Allocations
by Florin_Andrei on Tuesday April 24, 2018 @09:19PM
(#16918032)
> NAT does nothing meaningful securitywise that a firewall cannot achive
One good thing about NAT is even if you screw up the firewall config, such as configure everything in "allow all" mode, your internal network is still secure, because private IPs are not routable at the Internet level.
One good thing about NAT is even if you screw up the firewall config, such as configure everything in "allow all" mode, your internal network is still secure, because private IPs are not routable at the Internet level.
> and causes a lot of stupid problems.
That is true.