4 ms·
It does provide somewhat of an isolation on the WAN side. If your grandma installs ElasticSearch on her box, she won't get pwned because it listens on 0.0.0.0
by therein 10y ago
It does provide somewhat of an isolation on the WAN side.
If your grandma installs ElasticSearch on her box, she won't get pwned because it listens on 0.0.0.0 on her laptop and she didn't get the latest updates and is vulnerable to RCE.
- zAy0LfpBZLC8mAC 10y agoPlease explain how NAT provides isolation on the WAN side.
- dreamcompiler 10y agoNAT doesn't isolate your router, but it does isolate devices behind your router from unsolicited WAN-side connections (modulo hacking the router itself and hijacking sessions, of course). How is this not a security benefit?
- Dylan16807 10y agoNAT does not necessarily do this.
- zAy0LfpBZLC8mAC 10y agoYou are just repeating the claim. I asked for an explanation of how it supposedly does that, not for a repetition of the claim.
- Eugr 10y agoConsumer-grade routers that support IPv6 out of the box (in the official firmware) normally block incoming IPv6 connections from WAN side by default, so it won't really be different from NAT security-wise.