Re: how to configure a router/firewall with no nat

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 01/13/07 15:48, Pascal Hambourg wrote:
I really do not understand why one would use NAT when they do not have to. NAT is a necessary evil, and when it is not necessary, it is just evil. NAT does not provide security, or only through obscurity.

I believe it is the obscurity that some people seek when using NAT. The only other reason (at the moment) I can thing off for wanting to NAT inbound traffic is so that the advertised IP address can serve multiple resources, even if one machine can not. I.e. direct HTTP to the web server(s), SMTP to the exchange servers or the sendmail server, or VPN traffic to an internal VPN concentrator, etc. This allows a company to minimize the number of IPs that are directly accessible on the net.



Grant. . . .


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux