4 ms·
I think the idea here is being that if NAT is used, in the most common meaning, that usually means that the machine behind the router is not Internet-routable.
by Erlich_Bachman 9y ago
I think the idea here is being that if NAT is used, in the most common meaning, that usually means that the machine behind the router is not Internet-routable. There is no address which can be reached from the internet, that will go to the machine directly. (Which has actual security benefits.)
Of course the abbreviation "NAT" really has a broader meaning, and one can of course set up certain network configurations where the machine would still be Internet-routable, even though NAT is used for something, or the other way around, etc.
Is this what you meant? Judging by the link it seems so.
A clarification could be important, so do you suggest perhaps that the question should have been more like "If my machine does not have a direct Internet address, due to NAT configuration, am I safe from ME exploits"?
- pdkl95 9y ago> There is no address which can be reached from the internet Maybe read my previous [1] again? If you are behind a NAT only - which would be highly unusual - you probably can send packets to it from the internet. The router will simply forward packets that have an internal (RFC 1918) DST address. That only thing NAT does is rewrite address fields. The reason you usually cannot receive packets directly from the internet is due to the stateful firewall. > "If my machine does not have a direct Internet address, due to NAT configuration, am I safe from ME exploits"? s/NAT/firewall/