3 ms·
You’re confusing a firewall and a NAT. Having a publicly routable IP address does not in any way imply allowing external connectivity to that address. The fire
by stouset 6y ago
You’re confusing a firewall and a NAT. Having a publicly routable IP address does not in any way imply allowing external connectivity to that address.
The firewall rule that allows packets from ESTABLISHED and RELATED connections back to a host behind a NAT is the exact same rule that allows packets to get through a default-drop firewall.
- mikewarot 6y agoIf your computer is secure, you don't need a firewall.
- Dagger2 6y agoAnd if you don't think Linux and Windows are secure, then you do. Either way, you shouldn't be putting them behind NAT. You should put them behind NAT if you want to connect your network to the internet but you don't have enough IP space to do it. It has nothing to do with how secure you think your OSs are.
- mikewarot 6y agoYou misunderstand the depths of my pessimism. I don't believe any firewall out there is fit for purpose, because the OS on which it is based is likely to be insecure. On top of that OS would then be the firewall software itself. I would truly love to be proved wrong, but mathematically proven systems are few and far between.