News for hackers. Stuff that matters.

A comment on The Ripe NCC Has Run Out of IPv4 Addresses. Parent comment

Re:The Ripe NCC Has Run Out of IPv4 Addresses by icedchai on Thursday November 28, 2019 @03:28PM (#21659983)
The discussion is about NAT and PAT in general. 99% of the time it is used with unrouteable private addresses. This means even in the absence of a firewall there is still some level of security. End of story.
[ Parent | on HN ]
Re:The Ripe NCC Has Run Out of IPv4 Addresses by Dagger2 on Friday November 29, 2019 @05:29PM (#21667196)
It's common to use it with RFC1918 addresses, but that still doesn't change the behavior of PAT. PAT will not drop connections, and thus won't provide you with security.
[ Parent | on HN ]
Re:The Ripe NCC Has Run Out of IPv4 Addresses by icedchai on Friday November 29, 2019 @08:54PM (#21668010)
Security is not black or white, it is shades of gray. We'll just have to disagree.
[ Parent | on HN ]
Re:The Ripe NCC Has Run Out of IPv4 Addresses by Dagger2 on Saturday November 30, 2019 @08:28AM (#21669871)
The behavior of PAT is, though. You can sniff packets and confirm that it behaves the way I'm describing.
[ Parent | on HN ]
Re:The Ripe NCC Has Run Out of IPv4 Addresses by icedchai on Saturday November 30, 2019 @05:21PM (#21672471)
I already know this.
[ Parent | on HN ]